Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Windows Small Business Server > Web Hosting on a SBS2003 member server

Reply
Thread Tools Display Modes

Web Hosting on a SBS2003 member server

 
 
Charles Irwin
Guest
Posts: n/a

 
      05-13-2005
I have a client with SBS 2003 premium edition, two nics, static ip.
They also have a Win2003SP1 server running IIS on the private netwok.
This server is a member server in the domain.

Is it possible to:
1. Host a corp website (FQDN) behind the ISA firewall. (www.domainname.com)
2. Have the ISA 2000 firewall port forward port 80 to the private IP of this
server.


Presently thier Web site is hosted by a third party web hosting service.

Thanks in advance.

Charles


 
Reply With Quote
 
 
 
 
Bill Peng [MSFT]
Guest
Posts: n/a

 
      05-16-2005
Hi Charles,

Thank you for posting here.

If there's only 1 external domain name, I recommend you to use the default 80 and 443 ports for the SBS Server's web site.

Then, you can publish the internal server on another port (such as port 88). To do so:

Step 1. Create a Protocol Definition.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Policy Elements/Protocol Definitions.
3. Right click Protocol Definitions, point to New and click Definition.
4. Key in the name and click Next.
5. Choose TCP 88 inbound and click Next.
6. Finish the wizard.

Step 2. Create a Server Publishing Rule.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
3. Right click Server Publishing Rules, point to New and click Rule.
4. Key in the name and click Next.
5. Choose your internal server's IP and choose your ISA server's external IP.
6. Choose the protocol we defined in step 1.
7. Finish the wizard.

If there're 2 public domain names, you're able to follow these steps to publish the web site.

Step 1. Create a Destination Set.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
3. Right click Destination Sets, point to New and click Set.
4. Key in the name in Destination box and click OK.

Step 2. Create a Web Publishing Rule.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
3. Right click Web Publishing Rules, point to New and click Rule.
4. Key in the name and click Next.
5. Choose Specified destination set and choose the destination set we created in step 1 from the list.
6. Proceed to the "Rule Action" page and choose "Redirect the request to this internal Web Server (name or IP address)" and key in your internal
server's IP address.
7. Finish the wizard.

[Note] If you choose to not publish the SBS default web site to the internet, you can publish the additional server. However, this is not
recommended.

I hope the above info helps.

If there's any update, please feel free to post back.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
>X-Trace-PostClient-IP: 68.145.183.14
>From: "Charles Irwin" <>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Web Hosting on a SBS2003 member server
>Lines: 17
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>Date: Fri, 13 May 2005 15:16:51 GMT
>NNTP-Posting-Host: 24.71.223.147
>X-Complaints-To:
>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51 MDT)
>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>Organization: Shaw Residential Internet
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!

nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I have a client with SBS 2003 premium edition, two nics, static ip.
>They also have a Win2003SP1 server running IIS on the private netwok.
>This server is a member server in the domain.
>
>Is it possible to:
>1. Host a corp website (FQDN) behind the ISA firewall. (www.domainname.com)
>2. Have the ISA 2000 firewall port forward port 80 to the private IP of this
>server.
>
>
>Presently thier Web site is hosted by a third party web hosting service.
>
>Thanks in advance.
>
>Charles
>
>
>



 
Reply With Quote
 
Charles Irwin
Guest
Posts: n/a

 
      05-16-2005
Thanks Bill for the reply.

Yes there is only one Internet Domain ie www.myclient.com
The SBS 2003 is the mail server (Exchange SMTP).
The users connect via certificate to mail.myclient.com
for Remote WorkPlace and OWA.


Thanks I will give the redirect to port 88 as per your instructions.

Thanks again

Charles


"Bill Peng [MSFT]" <v-> wrote in message
news:...
> Hi Charles,
>
> Thank you for posting here.
>
> If there's only 1 external domain name, I recommend you to use the default
> 80 and 443 ports for the SBS Server's web site.
>
> Then, you can publish the internal server on another port (such as port
> 88). To do so:
>
> Step 1. Create a Protocol Definition.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
> Definitions.
> 3. Right click Protocol Definitions, point to New and click Definition.
> 4. Key in the name and click Next.
> 5. Choose TCP 88 inbound and click Next.
> 6. Finish the wizard.
>
> Step 2. Create a Server Publishing Rule.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
> 3. Right click Server Publishing Rules, point to New and click Rule.
> 4. Key in the name and click Next.
> 5. Choose your internal server's IP and choose your ISA server's external
> IP.
> 6. Choose the protocol we defined in step 1.
> 7. Finish the wizard.
>
> If there're 2 public domain names, you're able to follow these steps to
> publish the web site.
>
> Step 1. Create a Destination Set.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
> 3. Right click Destination Sets, point to New and click Set.
> 4. Key in the name in Destination box and click OK.
>
> Step 2. Create a Web Publishing Rule.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
> 3. Right click Web Publishing Rules, point to New and click Rule.
> 4. Key in the name and click Next.
> 5. Choose Specified destination set and choose the destination set we
> created in step 1 from the list.
> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
> this internal Web Server (name or IP address)" and key in your internal
> server's IP address.
> 7. Finish the wizard.
>
> [Note] If you choose to not publish the SBS default web site to the
> internet, you can publish the additional server. However, this is not
> recommended.
>
> I hope the above info helps.
>
> If there's any update, please feel free to post back.
>
> Bill Peng
> MCSE 2000, MCDBA
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> --------------------
>>X-Trace-PostClient-IP: 68.145.183.14
>>From: "Charles Irwin" <>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Subject: Web Hosting on a SBS2003 member server
>>Lines: 17
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>Date: Fri, 13 May 2005 15:16:51 GMT
>>NNTP-Posting-Host: 24.71.223.147
>>X-Complaints-To:
>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51 MDT)
>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>Organization: Shaw Residential Internet
>>Path:
>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsf eed00.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!

> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>They also have a Win2003SP1 server running IIS on the private netwok.
>>This server is a member server in the domain.
>>
>>Is it possible to:
>>1. Host a corp website (FQDN) behind the ISA firewall.
>>(www.domainname.com)
>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>this
>>server.
>>
>>
>>Presently thier Web site is hosted by a third party web hosting service.
>>
>>Thanks in advance.
>>
>>Charles
>>
>>
>>

>
>



 
Reply With Quote
 
Bill Peng [MSFT]
Guest
Posts: n/a

 
      05-17-2005
Hi Charles,

Thank you for the update and I'm glad that the info helps.

As always, we look forward to working with you here again.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and
benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>X-Trace-PostClient-IP: 68.145.183.14
>From: "Charles Irwin" <>
>Newsgroups: microsoft.public.windows.server.sbs
>References: <Dx3he.1335531$8l.823152@pd7tw1no> <>
>Subject: Re: Web Hosting on a SBS2003 member server
>Lines: 140
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <yt3ie.1374207$6l.599226@pd7tw2no>
>Date: Mon, 16 May 2005 16:01:34 GMT
>NNTP-Posting-Host: 24.71.223.147
>X-Complaints-To:
>X-Trace: pd7tw2no 1116259294 24.71.223.147 (Mon, 16 May 2005 10:01:34 MDT)
>NNTP-Posting-Date: Mon, 16 May 2005 10:01:34 MDT
>Organization: Shaw Residential Internet
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-online.de!

border2.nntp.dca.giganews.com!nntp.giganews.com!pd 7cy2so!shaw.ca!pd7tw2no.POSTED!53ab2750!not-
for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118908
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks Bill for the reply.
>
>Yes there is only one Internet Domain ie www.myclient.com
>The SBS 2003 is the mail server (Exchange SMTP).
>The users connect via certificate to mail.myclient.com
>for Remote WorkPlace and OWA.
>
>
>Thanks I will give the redirect to port 88 as per your instructions.
>
>Thanks again
>
>Charles
>
>
>"Bill Peng [MSFT]" <v-> wrote in message
>news:...
>> Hi Charles,
>>
>> Thank you for posting here.
>>
>> If there's only 1 external domain name, I recommend you to use the default
>> 80 and 443 ports for the SBS Server's web site.
>>
>> Then, you can publish the internal server on another port (such as port
>> 88). To do so:
>>
>> Step 1. Create a Protocol Definition.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
>> Definitions.
>> 3. Right click Protocol Definitions, point to New and click Definition.
>> 4. Key in the name and click Next.
>> 5. Choose TCP 88 inbound and click Next.
>> 6. Finish the wizard.
>>
>> Step 2. Create a Server Publishing Rule.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
>> 3. Right click Server Publishing Rules, point to New and click Rule.
>> 4. Key in the name and click Next.
>> 5. Choose your internal server's IP and choose your ISA server's external
>> IP.
>> 6. Choose the protocol we defined in step 1.
>> 7. Finish the wizard.
>>
>> If there're 2 public domain names, you're able to follow these steps to
>> publish the web site.
>>
>> Step 1. Create a Destination Set.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
>> 3. Right click Destination Sets, point to New and click Set.
>> 4. Key in the name in Destination box and click OK.
>>
>> Step 2. Create a Web Publishing Rule.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
>> 3. Right click Web Publishing Rules, point to New and click Rule.
>> 4. Key in the name and click Next.
>> 5. Choose Specified destination set and choose the destination set we
>> created in step 1 from the list.
>> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
>> this internal Web Server (name or IP address)" and key in your internal
>> server's IP address.
>> 7. Finish the wizard.
>>
>> [Note] If you choose to not publish the SBS default web site to the
>> internet, you can publish the additional server. However, this is not
>> recommended.
>>
>> I hope the above info helps.
>>
>> If there's any update, please feel free to post back.
>>
>> Bill Peng
>> MCSE 2000, MCDBA
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> --------------------
>>>X-Trace-PostClient-IP: 68.145.183.14
>>>From: "Charles Irwin" <>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>Subject: Web Hosting on a SBS2003 member server
>>>Lines: 17
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>>Date: Fri, 13 May 2005 15:16:51 GMT
>>>NNTP-Posting-Host: 24.71.223.147
>>>X-Complaints-To:
>>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51 MDT)
>>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>>Organization: Shaw Residential Internet
>>>Path:
>>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!news feed00.sul.t-online.de!t-online.de!

border2.nntp.dca.giganews.com!
>> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>>They also have a Win2003SP1 server running IIS on the private netwok.
>>>This server is a member server in the domain.
>>>
>>>Is it possible to:
>>>1. Host a corp website (FQDN) behind the ISA firewall.
>>>(www.domainname.com)
>>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>>this
>>>server.
>>>
>>>
>>>Presently thier Web site is hosted by a third party web hosting service.
>>>
>>>Thanks in advance.
>>>
>>>Charles
>>>
>>>
>>>

>>
>>

>
>
>



 
Reply With Quote
 
Charles Irwin
Guest
Posts: n/a

 
      05-17-2005
Thanks for the help Bill.

I tried to publish the web server today without any success.

Here is more info on my clients site.

www.clientcompanyname.com FQDN (externally hosted)


The Internal Server2003SP1 internal IP is 10.0.0.4 member server in the SBS
domain.
MS FQDN (IISservername.internalname.local)


The SBS 2003 Premium servers internal IP is 10.0.0.3
FQDN is mail.myclientsdomain.com
mask 255.0.0.0
MS FQDN (SBS2003.internalname.local)
Remote web workplace, OWA, VPN are working with self issued certificate.

I can load the page using IE on the SBS server with URL
http:\\IISservername.internalname.local\foldername
The sudent who loaded this IIS server setup the server this way for some
reason and should work.

I cannot see the web page from the Internet when published as web server
after creating a destination set
and Web publishing rule.

I also cannot see the web page from the Internet when I Create a protocol
Definition and publish the server to port 88

Any thoughts?

Charles


"Bill Peng [MSFT]" <v-> wrote in message
news:...
> Hi Charles,
>
> Thank you for posting here.
>
> If there's only 1 external domain name, I recommend you to use the default
> 80 and 443 ports for the SBS Server's web site.
>
> Then, you can publish the internal server on another port (such as port
> 88). To do so:
>
> Step 1. Create a Protocol Definition.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
> Definitions.
> 3. Right click Protocol Definitions, point to New and click Definition.
> 4. Key in the name and click Next.
> 5. Choose TCP 88 inbound and click Next.
> 6. Finish the wizard.
>
> Step 2. Create a Server Publishing Rule.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
> 3. Right click Server Publishing Rules, point to New and click Rule.
> 4. Key in the name and click Next.
> 5. Choose your internal server's IP and choose your ISA server's external
> IP.
> 6. Choose the protocol we defined in step 1.
> 7. Finish the wizard.
>
> If there're 2 public domain names, you're able to follow these steps to
> publish the web site.
>
> Step 1. Create a Destination Set.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
> 3. Right click Destination Sets, point to New and click Set.
> 4. Key in the name in Destination box and click OK.
>
> Step 2. Create a Web Publishing Rule.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
> 3. Right click Web Publishing Rules, point to New and click Rule.
> 4. Key in the name and click Next.
> 5. Choose Specified destination set and choose the destination set we
> created in step 1 from the list.
> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
> this internal Web Server (name or IP address)" and key in your internal
> server's IP address.
> 7. Finish the wizard.
>
> [Note] If you choose to not publish the SBS default web site to the
> internet, you can publish the additional server. However, this is not
> recommended.
>
> I hope the above info helps.
>
> If there's any update, please feel free to post back.
>
> Bill Peng
> MCSE 2000, MCDBA
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> --------------------
>>X-Trace-PostClient-IP: 68.145.183.14
>>From: "Charles Irwin" <>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Subject: Web Hosting on a SBS2003 member server
>>Lines: 17
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>Date: Fri, 13 May 2005 15:16:51 GMT
>>NNTP-Posting-Host: 24.71.223.147
>>X-Complaints-To:
>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51 MDT)
>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>Organization: Shaw Residential Internet
>>Path:
>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsf eed00.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!

> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>They also have a Win2003SP1 server running IIS on the private netwok.
>>This server is a member server in the domain.
>>
>>Is it possible to:
>>1. Host a corp website (FQDN) behind the ISA firewall.
>>(www.domainname.com)
>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>this
>>server.
>>
>>
>>Presently thier Web site is hosted by a third party web hosting service.
>>
>>Thanks in advance.
>>
>>Charles
>>
>>
>>

>
>



 
Reply With Quote
 
Bill Peng [MSFT]
Guest
Posts: n/a

 
      05-17-2005
Hi Charles,

Thank you for the update.

Please understand that you must use Server Publishing Rule instead of Web Publishing Rule if you have only
1 public domain name. I'd like to include the steps here again:

Step 1. Create a Protocol Definition.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Policy Elements/Protocol Definitions.
3. Right click Protocol Definitions, point to New and click Definition.
4. Key in the name and click Next.
5. Choose TCP 88 inbound and click Next.
6. Finish the wizard.

Step 2. Create a Server Publishing Rule.

1. Open ISA Management.
2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
3. Right click Server Publishing Rules, point to New and click Rule.
4. Key in the name and click Next.
5. Choose your internal server's IP and choose your ISA server's external IP.
6. Choose the protocol we defined in step 1.
7. Finish the wizard.

Anything unclear, please feel free to post back.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and
benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>X-Trace-PostClient-IP: 68.145.183.14
>From: "Charles Irwin" <>
>Newsgroups: microsoft.public.windows.server.sbs
>References: <Dx3he.1335531$8l.823152@pd7tw1no> <>
>Subject: Re: Web Hosting on a SBS2003 member server
>Lines: 162
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <asdie.1380006$Xk.129555@pd7tw3no>
>Date: Tue, 17 May 2005 03:22:46 GMT
>NNTP-Posting-Host: 24.71.223.147
>X-Complaints-To:
>X-Trace: pd7tw3no 1116300166 24.71.223.147 (Mon, 16 May 2005 21:22:46 MDT)
>NNTP-Posting-Date: Mon, 16 May 2005 21:22:46 MDT
>Organization: Shaw Residential Internet
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-online.de!

border2.nntp.dca.giganews.com!border1.nntp.dca.gig anews.com!nntp.giganews.com!pd7cy2so!shaw.ca!
pd7tw3no.POSTED!53ab2750!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:119074
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks for the help Bill.
>
>I tried to publish the web server today without any success.
>
>Here is more info on my clients site.
>
>www.clientcompanyname.com FQDN (externally hosted)
>
>
>The Internal Server2003SP1 internal IP is 10.0.0.4 member server in the SBS
>domain.
>MS FQDN (IISservername.internalname.local)
>
>
>The SBS 2003 Premium servers internal IP is 10.0.0.3
>FQDN is mail.myclientsdomain.com
>mask 255.0.0.0
>MS FQDN (SBS2003.internalname.local)
>Remote web workplace, OWA, VPN are working with self issued certificate.
>
>I can load the page using IE on the SBS server with URL
>http:\\IISservername.internalname.local\foldernam e
>The sudent who loaded this IIS server setup the server this way for some
>reason and should work.
>
>I cannot see the web page from the Internet when published as web server
>after creating a destination set
>and Web publishing rule.
>
>I also cannot see the web page from the Internet when I Create a protocol
>Definition and publish the server to port 88
>
>Any thoughts?
>
>Charles
>
>
>"Bill Peng [MSFT]" <v-> wrote in message
>news:...
>> Hi Charles,
>>
>> Thank you for posting here.
>>
>> If there's only 1 external domain name, I recommend you to use the default
>> 80 and 443 ports for the SBS Server's web site.
>>
>> Then, you can publish the internal server on another port (such as port
>> 88). To do so:
>>
>> Step 1. Create a Protocol Definition.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
>> Definitions.
>> 3. Right click Protocol Definitions, point to New and click Definition.
>> 4. Key in the name and click Next.
>> 5. Choose TCP 88 inbound and click Next.
>> 6. Finish the wizard.
>>
>> Step 2. Create a Server Publishing Rule.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
>> 3. Right click Server Publishing Rules, point to New and click Rule.
>> 4. Key in the name and click Next.
>> 5. Choose your internal server's IP and choose your ISA server's external
>> IP.
>> 6. Choose the protocol we defined in step 1.
>> 7. Finish the wizard.
>>
>> If there're 2 public domain names, you're able to follow these steps to
>> publish the web site.
>>
>> Step 1. Create a Destination Set.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
>> 3. Right click Destination Sets, point to New and click Set.
>> 4. Key in the name in Destination box and click OK.
>>
>> Step 2. Create a Web Publishing Rule.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
>> 3. Right click Web Publishing Rules, point to New and click Rule.
>> 4. Key in the name and click Next.
>> 5. Choose Specified destination set and choose the destination set we
>> created in step 1 from the list.
>> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
>> this internal Web Server (name or IP address)" and key in your internal
>> server's IP address.
>> 7. Finish the wizard.
>>
>> [Note] If you choose to not publish the SBS default web site to the
>> internet, you can publish the additional server. However, this is not
>> recommended.
>>
>> I hope the above info helps.
>>
>> If there's any update, please feel free to post back.
>>
>> Bill Peng
>> MCSE 2000, MCDBA
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> --------------------
>>>X-Trace-PostClient-IP: 68.145.183.14
>>>From: "Charles Irwin" <>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>Subject: Web Hosting on a SBS2003 member server
>>>Lines: 17
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>>Date: Fri, 13 May 2005 15:16:51 GMT
>>>NNTP-Posting-Host: 24.71.223.147
>>>X-Complaints-To:
>>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51 MDT)
>>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>>Organization: Shaw Residential Internet
>>>Path:
>>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!news feed00.sul.t-online.de!t-online.de!

border2.nntp.dca.giganews.com!
>> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>>They also have a Win2003SP1 server running IIS on the private netwok.
>>>This server is a member server in the domain.
>>>
>>>Is it possible to:
>>>1. Host a corp website (FQDN) behind the ISA firewall.
>>>(www.domainname.com)
>>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>>this
>>>server.
>>>
>>>
>>>Presently thier Web site is hosted by a third party web hosting service.
>>>
>>>Thanks in advance.
>>>
>>>Charles
>>>
>>>
>>>

>>
>>

>
>
>



 
Reply With Quote
 
Charles Irwin
Guest
Posts: n/a

 
      05-17-2005
I tried it again this is what I get when I type in
http://mail.myclientsdomain.com:88

Gateway Timeout
The following error occurred:
Server unreachable


--------------------------------------------------------------------------------
Please contact the administrator.

Thanks Charles


"Bill Peng [MSFT]" <v-> wrote in message
news:tvJ$...
> Hi Charles,
>
> Thank you for the update.
>
> Please understand that you must use Server Publishing Rule instead of Web
> Publishing Rule if you have only
> 1 public domain name. I'd like to include the steps here again:
>
> Step 1. Create a Protocol Definition.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
> Definitions.
> 3. Right click Protocol Definitions, point to New and click Definition.
> 4. Key in the name and click Next.
> 5. Choose TCP 88 inbound and click Next.
> 6. Finish the wizard.
>
> Step 2. Create a Server Publishing Rule.
>
> 1. Open ISA Management.
> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
> 3. Right click Server Publishing Rules, point to New and click Rule.
> 4. Key in the name and click Next.
> 5. Choose your internal server's IP and choose your ISA server's external
> IP.
> 6. Choose the protocol we defined in step 1.
> 7. Finish the wizard.
>
> Anything unclear, please feel free to post back.
>
> Bill Peng
> MCSE 2000, MCDBA
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and
> benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --------------------
>>X-Trace-PostClient-IP: 68.145.183.14
>>From: "Charles Irwin" <>
>>Newsgroups: microsoft.public.windows.server.sbs
>>References: <Dx3he.1335531$8l.823152@pd7tw1no>
>><>
>>Subject: Re: Web Hosting on a SBS2003 member server
>>Lines: 162
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <asdie.1380006$Xk.129555@pd7tw3no>
>>Date: Tue, 17 May 2005 03:22:46 GMT
>>NNTP-Posting-Host: 24.71.223.147
>>X-Complaints-To:
>>X-Trace: pd7tw3no 1116300166 24.71.223.147 (Mon, 16 May 2005 21:22:46 MDT)
>>NNTP-Posting-Date: Mon, 16 May 2005 21:22:46 MDT
>>Organization: Shaw Residential Internet
>>Path:
>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsf eed00.sul.t-online.de!t-online.de!

> border2.nntp.dca.giganews.com!border1.nntp.dca.gig anews.com!nntp.giganews.com!pd7cy2so!shaw.ca!
> pd7tw3no.POSTED!53ab2750!not-for-mail
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:119074
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>Thanks for the help Bill.
>>
>>I tried to publish the web server today without any success.
>>
>>Here is more info on my clients site.
>>
>>www.clientcompanyname.com FQDN (externally hosted)
>>
>>
>>The Internal Server2003SP1 internal IP is 10.0.0.4 member server in the
>>SBS
>>domain.
>>MS FQDN (IISservername.internalname.local)
>>
>>
>>The SBS 2003 Premium servers internal IP is 10.0.0.3
>>FQDN is mail.myclientsdomain.com
>>mask 255.0.0.0
>>MS FQDN (SBS2003.internalname.local)
>>Remote web workplace, OWA, VPN are working with self issued certificate.
>>
>>I can load the page using IE on the SBS server with URL
>>http:\\IISservername.internalname.local\folderna me
>>The sudent who loaded this IIS server setup the server this way for some
>>reason and should work.
>>
>>I cannot see the web page from the Internet when published as web server
>>after creating a destination set
>>and Web publishing rule.
>>
>>I also cannot see the web page from the Internet when I Create a protocol
>>Definition and publish the server to port 88
>>
>>Any thoughts?
>>
>>Charles
>>
>>
>>"Bill Peng [MSFT]" <v-> wrote in message
>>news:...
>>> Hi Charles,
>>>
>>> Thank you for posting here.
>>>
>>> If there's only 1 external domain name, I recommend you to use the
>>> default
>>> 80 and 443 ports for the SBS Server's web site.
>>>
>>> Then, you can publish the internal server on another port (such as port
>>> 88). To do so:
>>>
>>> Step 1. Create a Protocol Definition.
>>>
>>> 1. Open ISA Management.
>>> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
>>> Definitions.
>>> 3. Right click Protocol Definitions, point to New and click Definition.
>>> 4. Key in the name and click Next.
>>> 5. Choose TCP 88 inbound and click Next.
>>> 6. Finish the wizard.
>>>
>>> Step 2. Create a Server Publishing Rule.
>>>
>>> 1. Open ISA Management.
>>> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing
>>> Rules.
>>> 3. Right click Server Publishing Rules, point to New and click Rule.
>>> 4. Key in the name and click Next.
>>> 5. Choose your internal server's IP and choose your ISA server's
>>> external
>>> IP.
>>> 6. Choose the protocol we defined in step 1.
>>> 7. Finish the wizard.
>>>
>>> If there're 2 public domain names, you're able to follow these steps to
>>> publish the web site.
>>>
>>> Step 1. Create a Destination Set.
>>>
>>> 1. Open ISA Management.
>>> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
>>> 3. Right click Destination Sets, point to New and click Set.
>>> 4. Key in the name in Destination box and click OK.
>>>
>>> Step 2. Create a Web Publishing Rule.
>>>
>>> 1. Open ISA Management.
>>> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
>>> 3. Right click Web Publishing Rules, point to New and click Rule.
>>> 4. Key in the name and click Next.
>>> 5. Choose Specified destination set and choose the destination set we
>>> created in step 1 from the list.
>>> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
>>> this internal Web Server (name or IP address)" and key in your internal
>>> server's IP address.
>>> 7. Finish the wizard.
>>>
>>> [Note] If you choose to not publish the SBS default web site to the
>>> internet, you can publish the additional server. However, this is not
>>> recommended.
>>>
>>> I hope the above info helps.
>>>
>>> If there's any update, please feel free to post back.
>>>
>>> Bill Peng
>>> MCSE 2000, MCDBA
>>> Microsoft CSS Online Newsgroup Support
>>>
>>> Get Secure! - www.microsoft.com/security
>>> ================================================== ===
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others may learn and benefit from your issue.
>>> ================================================== ===
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>>
>>> --------------------
>>>>X-Trace-PostClient-IP: 68.145.183.14
>>>>From: "Charles Irwin" <>
>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>Subject: Web Hosting on a SBS2003 member server
>>>>Lines: 17
>>>>X-Priority: 3
>>>>X-MSMail-Priority: Normal
>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>>X-RFC2646: Format=Flowed; Original
>>>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>>>Date: Fri, 13 May 2005 15:16:51 GMT
>>>>NNTP-Posting-Host: 24.71.223.147
>>>>X-Complaints-To:
>>>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51
>>>>MDT)
>>>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>>>Organization: Shaw Residential Internet
>>>>Path:
>>>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!new sfeed00.sul.t-online.de!t-online.de!

> border2.nntp.dca.giganews.com!
>>> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>
>>>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>>>They also have a Win2003SP1 server running IIS on the private netwok.
>>>>This server is a member server in the domain.
>>>>
>>>>Is it possible to:
>>>>1. Host a corp website (FQDN) behind the ISA firewall.
>>>>(www.domainname.com)
>>>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>>>this
>>>>server.
>>>>
>>>>
>>>>Presently thier Web site is hosted by a third party web hosting service.
>>>>
>>>>Thanks in advance.
>>>>
>>>>Charles
>>>>
>>>>
>>>>
>>>
>>>

>>
>>
>>

>
>



 
Reply With Quote
 
Bill Peng [MSFT]
Guest
Posts: n/a

 
      05-18-2005
Hi Charles,

Thank you for your update.

Have you changed the IIS configuration on the internal server to listen on port 88? If you've already
configured the ISA server properly, the port 88 requests will be redirect to the internal server. You must
change the internal server's IIS settings to make sure that the web site is on port 88.

To do so:

1. Open IIS snap-in on the internal server.
2. Go to Default Web Site (or the web site that you want to publish to the internet).
3. Right click it and click Properties.
4. Change the http port to 88.
5. Click OK.

If the problem persists, please collect an ISA info and post the info here.

1. Download the following tool:
http://www.isatools.org/isainfo.vbe
2. Run it on your SBS server.
3. Post the ISAInfo here.

I hope the above info helps.

Any update, please feel free to post back.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and
benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>X-Trace-PostClient-IP: 68.145.183.14
>From: "Charles Irwin" <>
>Newsgroups: microsoft.public.windows.server.sbs
>References: <Dx3he.1335531$8l.823152@pd7tw1no> <>

<asdie.1380006$Xk.129555@pd7tw3no> <tvJ$>
>Subject: Re: Web Hosting on a SBS2003 member server
>Lines: 259
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <wqnie.1389517$6l.79670@pd7tw2no>
>Date: Tue, 17 May 2005 14:43:40 GMT
>NNTP-Posting-Host: 24.71.223.147
>X-Complaints-To:
>X-Trace: pd7tw2no 1116341020 24.71.223.147 (Tue, 17 May 2005 08:43:40 MDT)
>NNTP-Posting-Date: Tue, 17 May 2005 08:43:40 MDT
>Organization: Shaw Residential Internet
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-online.de!

border2.nntp.dca.giganews.com!border1.nntp.dca.gig anews.com!nntp.giganews.com!pd7cy2so!shaw.ca!
pd7tw2no.POSTED!53ab2750!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:119199
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I tried it again this is what I get when I type in
>http://mail.myclientsdomain.com:88
>
>Gateway Timeout
>The following error occurred:
>Server unreachable
>
>
>--------------------------------------------------------------------------------
>Please contact the administrator.
>
>Thanks Charles
>
>
>"Bill Peng [MSFT]" <v-> wrote in message
>news:tvJ$...
>> Hi Charles,
>>
>> Thank you for the update.
>>
>> Please understand that you must use Server Publishing Rule instead of Web
>> Publishing Rule if you have only
>> 1 public domain name. I'd like to include the steps here again:
>>
>> Step 1. Create a Protocol Definition.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
>> Definitions.
>> 3. Right click Protocol Definitions, point to New and click Definition.
>> 4. Key in the name and click Next.
>> 5. Choose TCP 88 inbound and click Next.
>> 6. Finish the wizard.
>>
>> Step 2. Create a Server Publishing Rule.
>>
>> 1. Open ISA Management.
>> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing Rules.
>> 3. Right click Server Publishing Rules, point to New and click Rule.
>> 4. Key in the name and click Next.
>> 5. Choose your internal server's IP and choose your ISA server's external
>> IP.
>> 6. Choose the protocol we defined in step 1.
>> 7. Finish the wizard.
>>
>> Anything unclear, please feel free to post back.
>>
>> Bill Peng
>> MCSE 2000, MCDBA
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and
>> benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> --------------------
>>>X-Trace-PostClient-IP: 68.145.183.14
>>>From: "Charles Irwin" <>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>References: <Dx3he.1335531$8l.823152@pd7tw1no>
>>><>
>>>Subject: Re: Web Hosting on a SBS2003 member server
>>>Lines: 162
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <asdie.1380006$Xk.129555@pd7tw3no>
>>>Date: Tue, 17 May 2005 03:22:46 GMT
>>>NNTP-Posting-Host: 24.71.223.147
>>>X-Complaints-To:
>>>X-Trace: pd7tw3no 1116300166 24.71.223.147 (Mon, 16 May 2005 21:22:46 MDT)
>>>NNTP-Posting-Date: Mon, 16 May 2005 21:22:46 MDT
>>>Organization: Shaw Residential Internet
>>>Path:
>>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!news feed00.sul.t-online.de!t-online.de!

>> border2.nntp.dca.giganews.com!border1.nntp.dca.gig anews.com!nntp.giganews.com!pd7cy2so!shaw.ca!
>> pd7tw3no.POSTED!53ab2750!not-for-mail
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:119074
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Thanks for the help Bill.
>>>
>>>I tried to publish the web server today without any success.
>>>
>>>Here is more info on my clients site.
>>>
>>>www.clientcompanyname.com FQDN (externally hosted)
>>>
>>>
>>>The Internal Server2003SP1 internal IP is 10.0.0.4 member server in the
>>>SBS
>>>domain.
>>>MS FQDN (IISservername.internalname.local)
>>>
>>>
>>>The SBS 2003 Premium servers internal IP is 10.0.0.3
>>>FQDN is mail.myclientsdomain.com
>>>mask 255.0.0.0
>>>MS FQDN (SBS2003.internalname.local)
>>>Remote web workplace, OWA, VPN are working with self issued certificate.
>>>
>>>I can load the page using IE on the SBS server with URL
>>>http:\\IISservername.internalname.local\foldern ame
>>>The sudent who loaded this IIS server setup the server this way for some
>>>reason and should work.
>>>
>>>I cannot see the web page from the Internet when published as web server
>>>after creating a destination set
>>>and Web publishing rule.
>>>
>>>I also cannot see the web page from the Internet when I Create a protocol
>>>Definition and publish the server to port 88
>>>
>>>Any thoughts?
>>>
>>>Charles
>>>
>>>
>>>"Bill Peng [MSFT]" <v-> wrote in message
>>>news:.. .
>>>> Hi Charles,
>>>>
>>>> Thank you for posting here.
>>>>
>>>> If there's only 1 external domain name, I recommend you to use the
>>>> default
>>>> 80 and 443 ports for the SBS Server's web site.
>>>>
>>>> Then, you can publish the internal server on another port (such as port
>>>> 88). To do so:
>>>>
>>>> Step 1. Create a Protocol Definition.
>>>>
>>>> 1. Open ISA Management.
>>>> 2. Go to Server and Arrays/Servername/Policy Elements/Protocol
>>>> Definitions.
>>>> 3. Right click Protocol Definitions, point to New and click Definition.
>>>> 4. Key in the name and click Next.
>>>> 5. Choose TCP 88 inbound and click Next.
>>>> 6. Finish the wizard.
>>>>
>>>> Step 2. Create a Server Publishing Rule.
>>>>
>>>> 1. Open ISA Management.
>>>> 2. Go to Server and Arrays/Servername/Publishing/Server Publishing
>>>> Rules.
>>>> 3. Right click Server Publishing Rules, point to New and click Rule.
>>>> 4. Key in the name and click Next.
>>>> 5. Choose your internal server's IP and choose your ISA server's
>>>> external
>>>> IP.
>>>> 6. Choose the protocol we defined in step 1.
>>>> 7. Finish the wizard.
>>>>
>>>> If there're 2 public domain names, you're able to follow these steps to
>>>> publish the web site.
>>>>
>>>> Step 1. Create a Destination Set.
>>>>
>>>> 1. Open ISA Management.
>>>> 2. Go to Server and Arrays/Servername/Policy Elements/Destination Sets.
>>>> 3. Right click Destination Sets, point to New and click Set.
>>>> 4. Key in the name in Destination box and click OK.
>>>>
>>>> Step 2. Create a Web Publishing Rule.
>>>>
>>>> 1. Open ISA Management.
>>>> 2. Go to Server and Arrays/Servername/Publishing/Web Publishing Rules.
>>>> 3. Right click Web Publishing Rules, point to New and click Rule.
>>>> 4. Key in the name and click Next.
>>>> 5. Choose Specified destination set and choose the destination set we
>>>> created in step 1 from the list.
>>>> 6. Proceed to the "Rule Action" page and choose "Redirect the request to
>>>> this internal Web Server (name or IP address)" and key in your internal
>>>> server's IP address.
>>>> 7. Finish the wizard.
>>>>
>>>> [Note] If you choose to not publish the SBS default web site to the
>>>> internet, you can publish the additional server. However, this is not
>>>> recommended.
>>>>
>>>> I hope the above info helps.
>>>>
>>>> If there's any update, please feel free to post back.
>>>>
>>>> Bill Peng
>>>> MCSE 2000, MCDBA
>>>> Microsoft CSS Online Newsgroup Support
>>>>
>>>> Get Secure! - www.microsoft.com/security
>>>> ================================================== ===
>>>> When responding to posts, please "Reply to Group" via your newsreader so
>>>> that others may learn and benefit from your issue.
>>>> ================================================== ===
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>>
>>>> --------------------
>>>>>X-Trace-PostClient-IP: 68.145.183.14
>>>>>From: "Charles Irwin" <>
>>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>>Subject: Web Hosting on a SBS2003 member server
>>>>>Lines: 17
>>>>>X-Priority: 3
>>>>>X-MSMail-Priority: Normal
>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>>>X-RFC2646: Format=Flowed; Original
>>>>>Message-ID: <Dx3he.1335531$8l.823152@pd7tw1no>
>>>>>Date: Fri, 13 May 2005 15:16:51 GMT
>>>>>NNTP-Posting-Host: 24.71.223.147
>>>>>X-Complaints-To:
>>>>>X-Trace: pd7tw1no 1115997411 24.71.223.147 (Fri, 13 May 2005 09:16:51
>>>>>MDT)
>>>>>NNTP-Posting-Date: Fri, 13 May 2005 09:16:51 MDT
>>>>>Organization: Shaw Residential Internet
>>>>>Path:
>>>>>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!ne wsfeed00.sul.t-online.de!t-online.de!

>> border2.nntp.dca.giganews.com!
>>>> nntp.giganews.com!pd7cy2so!pd7cy1no!shaw.ca!pd7tw1 no.POSTED!53ab2750!not-for-mail
>>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:118410
>>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>>
>>>>>I have a client with SBS 2003 premium edition, two nics, static ip.
>>>>>They also have a Win2003SP1 server running IIS on the private netwok.
>>>>>This server is a member server in the domain.
>>>>>
>>>>>Is it possible to:
>>>>>1. Host a corp website (FQDN) behind the ISA firewall.
>>>>>(www.domainname.com)
>>>>>2. Have the ISA 2000 firewall port forward port 80 to the private IP of
>>>>>this
>>>>>server.
>>>>>
>>>>>
>>>>>Presently thier Web site is hosted by a third party web hosting service.
>>>>>
>>>>>Thanks in advance.
>>>>>
>>>>>Charles
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>>

>>
>>

>
>
>



 
Reply With Quote
 
Charles Irwin
Guest
Posts: n/a

 
      05-18-2005
No I had not redirected to port 88 on the internal server.
I did change the default website 88 and can access the web site with
http://10.0.0.4:88
from a browser on the private network.

I ran the isainfo.vbe script I am posting the text file here:
Report created by ISAInfo version 1.9.8
System Date and Time: 5/17/2005 10:32:51 PM
Running as GTC\administrator, in Array GTCSBS03, on Server GTCSBS03

************************************************** **************
ENTERPRISE CONFIGURATION
************************************************** **************
This is not an Enterprise Array..

************************************************** **************
ARRAYS
************************************************** **************
GTCSBS03
Description :
Created : 4/10/2005 11:22:19 PM
Type : Standard Edition
Mode : Integrated

Packet Filter Log
Enabled : True
Selected Fields : date, time, source-ip, destination-ip, protocol,
param#1, param#2, filter-rule, interface
Log Format : W3C
Path : %ISAInstallFolder%\ISALogs
Keep old logs : 7
Cycle Logs : Daily
Compress Log Files : True

Firewall Log
Enabled : True
Selected Fields : c-ip, cs-username, c-agent, date, time,
s-computername, r-host, r-ip, r-port, time-taken, cs-bytes, sc-bytes,
cs-protocol, cs-transport, s-operation, sc-status, sessionid, connectionid
Log Format : W3C
Path : %ISAInstallFolder%\ISALogs
Keep old logs : 7
Cycle Logs : Daily
Compress Log Files : True

Web Proxy Log
Enabled : True
Selected Fields : c-ip, cs-username, c-agent, date, time,
s-computername, cs-referred, r-host, r-ip, r-port, time-taken, cs-bytes,
sc-bytes, cs-protocol, s-operation, cs-uri, s-object-source, sc-status
Log Format : W3C
Path : %ISAInstallFolder%\ISALogs
Keep old logs : 7
Cycle Logs : Daily
Compress Log Files : True

SSL Tunnel Port Ranges :
NNTP
From : 563
To : 563

SSL
From : 443
To : 443

Outgoing Web Requests
Use the same listener configuration for all internal IP addresses: True
Authentication :
Use integrated Windows authentication

TCP Port : 8080
SSL Port : 8443
Number of connections : Unlimited
Connection Timeout ( seconds ) : 900
Ask unauthenticated users for identification : True
Resolve requests in Array before routing : True

Incoming Web Requests
Use the same listener configuration for all IP addresses: False
Server : GTCSBS03
IP Address : 68.145.104.177
Authentication :
Use integrated Windows authentication

Server certificate
Friendly Name :
Issued by : mail.geomodeling.com
Issued to : mail.geomodeling.com
Expiration Date : 4/11/2010 5:36:18 AM

TCP Port : 80
SSL Port : 443
Cache SSL Responses : True
Number of connections : 300
Connection Timeout ( seconds ) : 900
Ask unauthenticated users for identification : False
Resolve requests in Array before routing : False

Publish automatic discovery infomation : False

************************************************** **************
SITE AND CONTENT RULES
************************************************** **************
Allow rule
Description :
Enabled : True
Rule Applies to : All Destinations
Access to the specified destinations : Allowed
Rule Applies to : Any Request
Rule Applies to : All Content Types

Small Business Server All Users Site and Content Rule
Description :
Enabled : True
Rule Applies to : Selected Destination Set
Destination Set Used : Small Business Server Microsoft Update Sites
Access to the specified destinations : Allowed
Rule Applies to : Any Request
Rule Applies to : All Content Types

Small Business Server Internet Access Site and Content Rule
Description :
Enabled : True
Rule Applies to : All External Destinations
Access to the specified destinations : Allowed
Rule Applies to : Specified Users
Users Included : GTC\SBS Internet Users ,
Rule Applies to : All Content Types

************************************************** **************
PROTOCOL RULES
************************************************** **************
Small Business Internet Access Protocol Rule
Description :
Enabled : True
Action taken with requests : Allow
Rule applies to : All IP Traffic
Rule Applies to : Specified Users
Users Included : GTC\SBS Internet Users ,

************************************************** **************
IP PACKET FILTERS
************************************************** **************
Enable Packet Filtering : True
Enable Intrusion detection : False
Enable IP routing : True
Enable filtering of IP fragments : False
Enable filtering IP options : False
Log packets from 'Allow' Filters : False
PPTP though ISA firewall : False

ICMP outbound
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP all outbound
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

ICMP ping response (in)
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP ping response
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

ICMP source quench
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP source quench
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

ICMP timeout in
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP timeout
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

ICMP unreachable in
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP unreachable
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS DHCP Client
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : UDP
Direction : Inbound and Outbound
Local Port : 68
Remote Port : 67
Local Computer Filter Applies to this IP : 0.0.0.0
Remote Computer Filter Applies to : All Remote Computers

SBS DnsLookupPredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : DNS Lookup
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS FTP 20 In CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound
Local Port: Any Port
Remote Port : 20
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS FTP 20 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port : 20
Remote Port : Any Port
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS FTP 21 In CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound
Local Port : 21
Remote Port : Any Port
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS FTP 21 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 21
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS HTTP 80 Out CustomFilter
Description :
Enabled : False
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 80
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS IcmpPingQueryPredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : ICMP ping query
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS IdentdPredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : Identd
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS NNTP 119 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 119
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS NTP 123 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : UDP
Direction : Outbound
Local Port: Any Port
Remote Port : 123
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS POP3 110 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 110
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS PptpCallPredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : PPTP call
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS PptpReceivePredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : PPTP receive
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS Remote Web Workplace CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound
Local Port : 4125
Remote Port : Any Port
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS SMTP 25 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 25
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS SmtpPredefinedType
Description :
Enabled : True
Filter Mode : Allow
Predefined Filter : SMTP
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS TS 3389 In CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound
Local Port : 3389
Remote Port : Any Port
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

SBS TS 3389 Out CustomFilter
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Outbound
Local Port: Any Port
Remote Port : 3389
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to : All Remote Computers

Spamfighter1
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound and Outbound
Local Port: Any Port
Remote Port : 2409
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to Host: 212.112.132.62

SPAMfighter2
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound and Outbound
Local Port : Dynamic port ( 1024 - 5000 )
Remote Port : 80
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to Host: 193.9.159.92

SPAMfighter3
Description :
Enabled : True
Filter Mode : Allow
Filter Type : Custom
Protocol : TCP
Direction : Inbound and Outbound
Local Port : Dynamic port ( 1024 - 5000 )
Remote Port : 80
Local Computer Filter Applies to : Default External IP
Remote Computer Filter Applies to Host: 83.90.215.169

************************************************** **************
WEB PUBLISHING RULES
************************************************** **************
Small Business RPC over HTTP Publishing Rule
Description :
Enabled : True
Destinations : Selected Destination Set
Destination Set Used : Small Business RPC over HTTP Destination Set
Action : Redirect to publishing.GTC.local
Send Original Host Header : True
HTTP Redirect Port : 80
SSL Redirect Port : 443
FTP Redirect Port : 21
Redirect HTTP requests as : HTTP Requests
Redirect SSL requests as : SSL Requests
Require SSL for Published Site : False
Rule Applies to : Any Request
** No additional configuration data found.

Small Business RUP Publishing Rule
Description :
Enabled : True
Destinations : Selected Destination Set
Destination Set Used : Small Business RUP Destination Set
Action : Redirect to publishing.GTC.local
Send Original Host Header : True
HTTP Redirect Port : 80
SSL Redirect Port : 443
FTP Redirect Port : 21
Redirect HTTP requests as : HTTP Requests
Redirect SSL requests as : SSL Requests
Require SSL for Published Site : False
Rule Applies to : Any Request
** No additional configuration data found.

Small Business OWA Web Publishing Rule
Description :
Enabled : True
Destinations : Selected Destination Set
Destination Set Used : Small Business Exchange OWA Destination Set
Action : Redirect to publishing.GTC.local
Send Original Host Header : True
HTTP Redirect Port : 80
SSL Redirect Port : 443
FTP Redirect Port : 21
Redirect HTTP requests as : HTTP Requests
Redirect SSL requests as : SSL Requests
Require SSL for Published Site : False
Rule Applies to : Any Request
** No additional configuration data found.

Default rule
Description :
Enabled : True
Destinations : All Destinations
Action : Discard the request
Redirect HTTP requests as : HTTP Requests
Redirect SSL requests as : HTTP Requests
Require SSL for Published Site : False
Rule Applies to : Any Request
** No additional configuration data found.

************************************************** **************
SERVER PUBLISHING RULES
************************************************** **************
Geomodel-Web
Description : New IIS Server
Enabled : True
IP Address of Internal Server : 10.0.0.4
External IP Address on ISA Server : 68.145.104.177
Protocol Used : Port 88 Redirect
Primary Port Used by Protocol : 88
Rule Applies to : Any Request


************************************************** **************
BANDWIDTH RULES
************************************************** **************
Enable Bandwidth Control : False

Default rule
Description :
Enabled : True
Rule applies to : All IP Traffic
Rule Applies to : All Destinations
Rule Applies to : Any Request
Rule Applies to : All Content Types
BandWidthPriority : Default bandwidth priority

************************************************** **************
SCHEDULES
************************************************** **************
Weekends
Description :
12 1 2 3 4 5 6 7 8 9 10 11 12 1 2 3 4 5 6 7 8 9
10 11
Sunday A A A A A A A A A A A A A A A A A A A A A A
A A
Monday I I I I I I I I I I I I I I I I I I I I I I
I I
Tuesday I I I I I I I I I I I I I I I I I I I I I I
I I
Wednesday I I I I I I I I I I I I I I I I I I I I I I
I I
Thursay I I I I I I I I I I I I I I I I I I I I I I
I I
Friday I I I I I I I I I I I I I I I I I I I I I I
I I
Saturday A A A A A A A A A A A A A A A A A A A A A A
A A

Work hours
Description :
12 1 2 3 4 5 6 7 8 9 10 11 12 1 2 3 4 5 6 7 8 9
10 11
Sunday I I I I I I I I I I I I I I I I I I I I I I
I I
Monday I I I I I I I I I A A A A A A A A I I I I I
I I
Tuesday I I I I I I I I I A A A A A A A A I I I I I
I I
Wednesday I I I I I I I I I A A A A A A A A I I I I I
I I
Thursay I I I I I I I I I A A A A A A A A I I I I I
I I
Friday I I I I I I I I I A A A A A A A A I I I I I
I I
Saturday I I I I I I I I I I I I I I I I I I I I I I
I I

************************************************** **************
DESTINATION SETS
************************************************** **************
Small Business Business Card Destination Set
Description :
DomainName: mail.geomodeling.com
Path: /
DomainName: mail.geomodeling.com
Path: /images/*

Small Business Exchange OWA Destination Set
Description :
DomainName: mail.geomodeling.com
Path: /Exchange/*
DomainName: mail.geomodeling.com
Path: /public/*
DomainName: mail.geomodeling.com
Path: /exchweb/*

Small Business RPC over HTTP Destination Set
Description :
DomainName: mail.geomodeling.com
Path: /rpc/*

Small Business RUP Destination Set
Description :
DomainName: mail.geomodeling.com
Path: /Remote/*
DomainName: mail.geomodeling.com
Path: /ClientHelp/*

Small Business Server Microsoft Update Sites
Description :
DomainName: *.windowsupdate.microsoft.com
DomainName: watson.microsoft.com
DomainName: office.microsoft.com/productupdates

************************************************** **************
CLIENT ADDRESS SETS
************************************************** **************
No Client Address Sets found

************************************************** **************
PROTOCOL DEFINITIONS
************************************************** **************
AOL Instant Messenger
Description : AOL instant messenger protocol
Initial Connection Port Number : 5190
Initial Protocol Type : TCP
Initial Direction : Outbound

Archie
Description : Archie protocol
Initial Connection Port Number : 1525
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Chargen(TCP)
Description : Character generator protocol (TCP)
Initial Connection Port Number : 19
Initial Protocol Type : TCP
Initial Direction : Outbound

Chargen(UDP)
Description : Character generator protocol (UDP)
Initial Connection Port Number : 19
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Daytime(TCP)
Description : Daytime protocol (TCP)
Initial Connection Port Number : 13
Initial Protocol Type : TCP
Initial Direction : Outbound

Daytime(UDP)
Description : Daytime protocol (UDP)
Initial Connection Port Number : 13
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Discard(TCP)
Description : Discard protocol (TCP)
Initial Connection Port Number : 9
Initial Protocol Type : TCP
Initial Direction : Outbound

Discard(UDP)
Description : Discard protocol (UDP)
Initial Connection Port Number : 9
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

DNS Query
Description : Domain Name System
Initial Connection Port Number : 53
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

DNS Query Server
Description : Domain Name System - Server
Initial Connection Port Number : 53
Initial Protocol Type : UDP
Initial Direction : Receive and Then Send

DNS Zone Transfer
Description : DNS Zone Transfer protocol
Initial Connection Port Number : 53
Initial Protocol Type : TCP
Initial Direction : Outbound

DNS Zone Transfer Server
Description : DNS zone transfer - Server
Initial Connection Port Number : 53
Initial Protocol Type : TCP
Initial Direction : Inbound

Echo (TCP)
Description : Echo protocol (TCP)
Initial Connection Port Number : 7
Initial Protocol Type : TCP
Initial Direction : Outbound

Echo (UDP)
Description : Echo protocol (UDP)
Initial Connection Port Number : 7
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Finger
Description : Finger protocol
Initial Connection Port Number : 79
Initial Protocol Type : TCP
Initial Direction : Outbound

Gopher
Description : Gopher protocol
Initial Connection Port Number : 70
Initial Protocol Type : TCP
Initial Direction : Outbound

HTTP
Description : Hyper Text Transfer Protocol (HTTP)
Initial Connection Port Number : 80
Initial Protocol Type : TCP
Initial Direction : Outbound

HTTPS
Description : Secure Hyper Text Transfer Protocol
Initial Connection Port Number : 443
Initial Protocol Type : TCP
Initial Direction : Outbound

HTTPS Server
Description : Secure Hyper Text Transfer Protocol - Server
Initial Connection Port Number : 443
Initial Protocol Type : TCP
Initial Direction : Inbound

ICA
Description : Citrix Intelligent Console Architecture protocol
Initial Connection Port Number : 1494
Initial Protocol Type : TCP
Initial Direction : Outbound

ICQ
Description : ICQ instant messenger protocol (legacy)
Initial Connection Port Number : 4000
Initial Protocol Type : UDP
Initial Direction : Send Only
Secondary Connections:
** Port Range : 0 - 0
Protocol Type : TCP
Direction : Inbound
** Port Range : 0 - 0
Protocol Type : UDP
Direction : Receive Only
** Port Range : 1025 - 5000
Protocol Type : TCP
Direction : Inbound
** Port Range : 1025 - 5000
Protocol Type : TCP
Direction : Outbound

ICQ 2000
Description : ICQ 2000 protocol
Initial Connection Port Number : 5190
Initial Protocol Type : TCP
Initial Direction : Outbound

Ident
Description : Ident protocol
Initial Connection Port Number : 113
Initial Protocol Type : TCP
Initial Direction : Outbound

IMAP4
Description : Interactive Mail Access Protocol
Initial Connection Port Number : 143
Initial Protocol Type : TCP
Initial Direction : Outbound

IMAP4 Server
Description : Interactive Mail Access Protocol (IMAP) - Server
Initial Connection Port Number : 143
Initial Protocol Type : TCP
Initial Direction : Inbound

IMAPS
Description : Secure Interactive Mail Access Protocol
Initial Connection Port Number : 993
Initial Protocol Type : TCP
Initial Direction : Outbound

IMAPS Server
Description : Secure Interactive Mail Access Protocol (IMAP) - Server
Initial Connection Port Number : 993
Initial Protocol Type : TCP
Initial Direction : Inbound

IRC
Description : Internet Relay Chat
Initial Connection Port Number : 6667
Initial Protocol Type : TCP
Initial Direction : Outbound

Kerberos-Adm(TCP)
Description : Kerberos administration (TCP)
Initial Connection Port Number : 749
Initial Protocol Type : TCP
Initial Direction : Outbound

Kerberos-Adm(UDP)
Description : Kerberos administration (UDP)
Initial Connection Port Number : 749
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Kerberos-IV
Description : Kerberos IV Authentication protocol
Initial Connection Port Number : 750
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Kerberos-Sec(TCP)
Description : Kerberos V authentication protocol
Initial Connection Port Number : 88
Initial Protocol Type : TCP
Initial Direction : Outbound

Kerberos-Sec(UDP)
Description : Kerberos V authentication protocol (UDP)
Initial Connection Port Number : 88
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

LDAP
Description : Lightweight Directory Access Protocol (LDAP)
Initial Connection Port Number : 389
Initial Protocol Type : TCP
Initial Direction : Outbound

LDAP GC (Global Catalog)
Description : Lightweight Directory Access Protocol global catalog protocol
Initial Connection Port Number : 3268
Initial Protocol Type : TCP
Initial Direction : Outbound

LDAPS
Description : Secure Lightweight Directory Access Protocol
Initial Connection Port Number : 636
Initial Protocol Type : TCP
Initial Direction : Outbound

LDAPS GC (Global Catalog)
Description : Secure Lightweight Directory Access Protocol global catalog
protocol
Initial Connection Port Number : 3269
Initial Protocol Type : TCP
Initial Direction : Outbound

Microsoft SQL Server
Description : Microsoft SQL Server protocol
Initial Connection Port Number : 1433
Initial Protocol Type : TCP
Initial Direction : Inbound

MSN
Description : MSN Internet Access protocol
Initial Connection Port Number : 569
Initial Protocol Type : TCP
Initial Direction : Outbound

MSN Messenger
Description : MSN messenger protocol
Initial Connection Port Number : 1863
Initial Protocol Type : TCP
Initial Direction : Outbound

Net2Phone
Description : Net2Phone protocol
Initial Connection Port Number : 6801
Initial Protocol Type : UDP
Initial Direction : Send Only
Secondary Connections:
** Port Range : 0 - 0
Protocol Type : TCP
Direction : Inbound
** Port Range : 0 - 0
Protocol Type : UDP
Direction : Receive Only
** Port Range : 1025 - 5000
Protocol Type : UDP
Direction : Send Only
** Port Range : 2000 - 2100
Protocol Type : UDP
Direction : Send and Then Receive
** Port Range : 3000 - 4000
Protocol Type : TCP
Direction : Inbound
** Port Range : 7800 - 7900
Protocol Type : TCP
Direction : Outbound

Net2Phone registration
Description : Net2Phone registration protocol
Initial Connection Port Number : 6500
Initial Protocol Type : TCP
Initial Direction : Outbound

NetBios Datagram
Description : NetBIOS Datagram protocol
Initial Connection Port Number : 138
Initial Protocol Type : UDP
Initial Direction : Send Only

NetBios Name Service
Description : NetBIOS Name Service protocol
Initial Connection Port Number : 137
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

NetBios Session
Description : NetBIOS Session protocol
Initial Connection Port Number : 139
Initial Protocol Type : TCP
Initial Direction : Outbound

NNTP
Description : Network News Transfer Protocol (NNTP)
Initial Connection Port Number : 119
Initial Protocol Type : TCP
Initial Direction : Outbound

NNTP Server
Description : Network News Transfer Protocol - Server
Initial Connection Port Number : 119
Initial Protocol Type : TCP
Initial Direction : Inbound

NNTPS
Description : Secure Network News Transfer Protocol
Initial Connection Port Number : 563
Initial Protocol Type : TCP
Initial Direction : Outbound

NNTPS Server
Description : Secure Network News Transfer Protocol - Server
Initial Connection Port Number : 563
Initial Protocol Type : TCP
Initial Direction : Inbound

NTP (UDP)
Description : Network Time Protocol (UDP)
Initial Connection Port Number : 123
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive
Secondary Connections:
** Port Range : 123 - 123
Protocol Type : UDP
Direction : Receive Only

POP2
Description : Post Office Protocol v.2
Initial Connection Port Number : 109
Initial Protocol Type : TCP
Initial Direction : Outbound

POP3
Description : Post Office Protocol v.3
Initial Connection Port Number : 110
Initial Protocol Type : TCP
Initial Direction : Outbound

POP3 Server
Description : Post Office Protocol v.3 - Server
Initial Connection Port Number : 110
Initial Protocol Type : TCP
Initial Direction : Inbound

POP3S
Description : Secure Post Office Protocol v.3
Initial Connection Port Number : 995
Initial Protocol Type : TCP
Initial Direction : Outbound

POP3S Server
Description : Secure Post Office Protocol v.3 - Server
Initial Connection Port Number : 995
Initial Protocol Type : TCP
Initial Direction : Inbound

Port 88 Redirect
Description :
Initial Connection Port Number : 88
Initial Protocol Type : TCP
Initial Direction : Inbound

Quote (TCP)
Description : Quote of the day protocol (TCP)
Initial Connection Port Number : 17
Initial Protocol Type : TCP
Initial Direction : Outbound

Quote (UDP)
Description : Quote of the day protocol (UDP)
Initial Connection Port Number : 17
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

RADIUS
Description : Remote Authentication Dial-In User Service protocol
Initial Connection Port Number : 1812
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

RADIUS Accounting
Description : Remote Authentication Dial-In User Service accounting
protocol
Initial Connection Port Number : 1813
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

RDP (Terminal Services)
Description : Remote Desktop Protocol (Terminal Services)
Initial Connection Port Number : 3389
Initial Protocol Type : TCP
Initial Direction : Outbound

RIP
Description : Routing Information Protocol
Initial Connection Port Number : 520
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

Rlogin
Description : Remote login protocol
Initial Connection Port Number : 513
Initial Protocol Type : TCP
Initial Direction : Outbound

SMTP
Description : Simple Mail Transfer Protocol (SMTP)
Initial Connection Port Number : 25
Initial Protocol Type : TCP
Initial Direction : Outbound

SMTP Server
Description : Simple Mail Transfer Protocol - Server
Initial Connection Port Number : 25
Initial Protocol Type : TCP
Initial Direction : Inbound

SMTPS
Description : Secure Simple Mail Transfer Protocol
Initial Connection Port Number : 465
Initial Protocol Type : TCP
Initial Direction : Outbound

SMTPS Server
Description : Secure Simple Mail Transfer Protocol (SMTP) - Server
Initial Connection Port Number : 465
Initial Protocol Type : TCP
Initial Direction : Inbound

SNMP
Description : Simple Network Management Protocol
Initial Connection Port Number : 161
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

SNMP Trap
Description : Simple Netowrk Management Protocol - Trap
Initial Connection Port Number : 162
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

SSH
Description : Secure Shell protocol
Initial Connection Port Number : 22
Initial Protocol Type : TCP
Initial Direction : Outbound

Telnet
Description : Telnet protocol
Initial Connection Port Number : 23
Initial Protocol Type : TCP
Initial Direction : Outbound

Telnet Server
Description : Telnet protocol - Server
Initial Connection Port Number : 23
Initial Protocol Type : TCP
Initial Direction : Inbound

TFTP
Description : Trivial File Transfer Protocol
Initial Connection Port Number : 69
Initial Protocol Type : UDP
Initial Direction : Send Only
Secondary Connections:
** Port Range : 0 - 0
Protocol Type : UDP
Direction : Receive and Then Send

Time (TCP)
Description : Time protocol (TCP)
Initial Connection Port Number : 37
Initial Protocol Type : TCP
Initial Direction : Outbound

Time (UDP)
Description : Time protocol (UDP)
Initial Connection Port Number : 37
Initial Protocol Type : UDP
Initial Direction : Send and Then Receive

WhoIs
Description : Nickname/Whois protocol
Initial Connection Port Number : 43
Initial Protocol Type : TCP
Initial Direction : Outbound

************************************************** **************
CONTENT GROUPS
************************************************** **************
Application
Description : Applications
Content Types : application/hta, application/x-internet-signup,
application/x-pkcs7-certificates, application/x-sv4crc,
application/octet-stream, application/x-pkcs7-certreqresp,
application/pkcs7-signature, application/x-cpio,
application/set-registration-initiation, application/x-dvi,
application/pkcs7-mime, application/x-csh, application/x-iphone, .hta, .isp,
..spc, .sv4crc, .bin, .p7r, .evy, .p7s, .cpio, .setreg, .dvi, .p7b, .p7c,
..csh, .iii, .man, application/x-troff-man, .hdf, application/x-hdf, .mvb,
application/x-msmediaview, .texi, application/x-texinfo, .setpay,
application/set-payment-initiation, .stl, application/vndms-pkistl, .ins,
..oda, application/oda, .nc, application/x-netcdf, .sh, application/x-sh,
..shar, application/x-shar, .tcl, application/x-tcl, .ms,
application/x-troff-ms, .ods, application/oleobject, .axs,
application/olescript, .dir, application/x-director, .sit,
application/x-stuffit, .crl, application/pkix-crl, .pub,
application/x-mspublisher, .spl, application/futuresplash, .hqx,
application/mac-binhex40, .p10, application/pkcs10, .dxr, .vbs, .js,
application/x-javascript, .m13, .me, application/x-troff-me, .latex,
application/x-latex, .m14, .cer, application/x-x509-ca-cert, .p12,
application/x-pkcs12, .pfx, .der, .texinfo, .p7m, .dcr, .sct,
text/scriptlet, .fif, application/fractals, .exe, .sst,
application/vndms-pkicertstore, .pko, application/vndms-pkipko, .scd,
application/x-msschedule, .bcpio, application/x-bcpio, .dll,
application/x-msdownload, .roff, application/x-troff, .t, .prf,
application/pics-rules, .tr, .src, application/x-wais-source, .acx,
application/internet-property-stream, .cat, application/vndms-pkiseccat,
..cdf, application/x-cdf, .sv4cpio, application/x-sv4cpio, .tex,
application/x-tex, .ustar, application/x-ustar, .crt

Application Data Files
Description : Files containing data for applications
Content Types : application/x-mscardfile, application/x-perfmon,
application/x-msclip, application/x-msmoney, application/winhlp,
application/x-mswrite, application/x-msterminal, application/x-msmetafile,
..crd, .clp, .hlp, .mny, .pma, .pmc, .pml, .pmr, .pmw, .trm, .wmf, .wri

Audio
Description : Audio files
Content Types : audio/*, .ra, .ram, .rmi, .au, .snd, .aif, .aifc, .wav,
..m3u, .mid, .mp3

Compressed Files
Description : Compressed Files
Content Types : application/x-gzip, application/x-tar, application/x-gtar,
application/x-compress, application/x-compressed,
application/x-zip-compressd, .gtar, .gz, .tar, .tgz, .z, .zip

Documents
Description : Documents
Content Types : text/tab-separated-values, text/xml, text/h323,
application/postscript, application/pdf, .ai, .323, .eps, .pdf, .ps, .tsv,
..xml

HTML Documents
Description : HTML Documents
Content Types : text/webviewhtml, text/html, .htm, .html, .htt, .stm, .xsl

Images
Description : All known types of images
Content Types : .cod, .cmx, .ief, .pbm, .pnm, .ppm, .gif, .bmp, .jfif,
..jpe, .jpg, .jpeg, .ico, .pgm, .ras, .rgb, .dib, .tif, .xbm, .xpm, .xwd,
image/*

Macro Documents
Description : Documents that may contain macros
Content Types : application/msword, application/vnd.ms-excel,
application/x-msaccess, application/vnd.ms-project,
application/vnd.ms-powerpoint, application/vnd.ms-works, application/rtf,
..doc, .dot, .mpp, .mdb, .pot, .pps, .ppt, .wcm, .wdb, .wks, .xla, .xlc,
..xls, .xlt, .xlm, .xlw

Text
Description : Text content
Content Types : .txt, .h, .c, .htc, .vcf, .etx, .uls, .css, .bas, .rtx,
text/plain, text/x-component, text/x-vcard, text/x-setext

Video
Description : Video files
Content Types : video/*, .asf, .asr, .asx, .avi, .ivf, .lsf, .lsx, .mov,
..movie, .mlv, .mp2, .mpa, .mpe, .mpg, .mpeg, .mpv2, .qt

VRML
Description : VRML
Content Types : x-world/x-vrml, .flr, .wrl, .wrz, .xaf, .xof

************************************************** **************
BANDWIDTH PRIORITIES
************************************************** **************
Default bandwidth priority
Description :
Outbound Bandwidth : 100
Inbound Bandwidth : 100

************************************************** **************
DIAL UP ENTRIES
************************************************** **************
No DialUp Entries found

************************************************** **************
CACHE CONFIGURATION
************************************************** **************
HTTP Cache Configuration :
HTTP Caching Enabled : True
Update Objects in Cache : Normally

FTP Cache Configuration :
FTP Caching Enabled : True
Time to live for all objects : 1440 minutes

Active Caching Configuration :
Active Caching Enabled : True
Retrieve Files : Normally

Advanced Options Selected :
Cache objects that have an unspecified last modification time : True
Cache objects even If they do not have an HTTP status code of 200 : True
Cache Dynamic Content : False
Maximum Size of URL cached in memory ( bytes ) : 12800
If web site of expired object cannot be reached :
Return the expired object only If expiration was :
At less than 50% of original TTL
But no more than 60 minutes
Percentage of free memory used for cache : 50

************************************************** **************
SCHEDULED CONTENT DOWNLOAD
************************************************** **************
No Scheduled Download tasks have been defined in this array.

************************************************** **************
APPLICATION FILTERS
************************************************** **************
SMTP Filter
Description : Filters SMTP traffic
Enabled: False
GUID: {179A0A70-1EF5-11D3-B160-00A0C9E3F998}
Protocols
Vendor: Microsoft
Version: 3.0
Settings:
** Disconnect on SMTP Filter rule violation : False

** Attachments
None Defined

** Rejected Senders
None Defined

** Rejected Domains
None Defined

** Keywords
None Defined

** Commands
Command : BDAT
- MaxLen : 20
- Default : True
- Enabled : True
Command : DATA
- MaxLen : 6
- Default : True
- Enabled : True
Command : EHLO
- MaxLen : 71
- Default : True
- Enabled : True
Command : EXPN
- MaxLen : 71
- Default : True
- Enabled : True
Command : HELO
- MaxLen : 71
- Default : True
- Enabled : True
Command : HELP
- MaxLen : 6
- Default : True
- Enabled : True
Command : MAIL FROM:
- MaxLen : 266
- Default : True
- Enabled : True
Command : NOOP
- MaxLen : 6
- Default : True
- Enabled : True
Command : QUIT
- MaxLen : 6
- Default : True
- Enabled : True
Command : RCPT TO:
- MaxLen : 266
- Default : True
- Enabled : True
Command : RSET
- MaxLen : 6
- Default : True
- Enabled : True
Command : SAML FROM:
- MaxLen : 268
- Default : True
- Enabled : True
Command : SEND FROM:
- MaxLen : 268
- Default : True
- Enabled : True
Command : SOML FROM:
- MaxLen : 268
- Default : True
- Enabled : True
Command : TURN
- MaxLen : 6
- Default : True
- Enabled : True
Command : VRFY
- MaxLen : 71
- Default : True
- Enabled : True


SOCKS V4 Filter
Description : Enables SOCKS 4 communication
Enabled: True
GUID: {25765C04-C80B-494C-914E-286297DB8C8E}
Protocols
Vendor: Microsoft
Version: 3.0
Settings:
SocksPort = 1080

Streaming Media Filter
Description : Enables streaming protocols
Enabled: True
GUID: {473ED0E1-6371-4ED2-9F95-A676B66659A2}
Protocols
** MMS - Windows Media
Description : Microsoft Media Streaming protocol - Client
Guid: {C9C5500B-B782-43E8-AB1F-EB8CAB33C691}
Primary Connections
Protocol: TCP - Outbound
PortLow: 1755
PortHigh: 1755
Protocol: UDP - Outbound
PortLow: 1755
PortHigh: 1755
** {CAE68AE1-1A22-4470-84EB-C4E82F009E5F}
** MMS - Windows Media Server
Description : Microsoft Streaming Media protocol - Server
Guid: {209D2BAE-7846-4B53-A649-D0529EA173B9}
Primary Connections
Protocol: TCP - Inbound
PortLow: 1755
PortHigh: 1755
Protocol: UDP - Inbound
PortLow: 1755
PortHigh: 1755
** PNM - RealNetworks protocol (Client)
Description : RealNetworks Streaming Media Protocol (PNM) - Client
Guid: {CC263ACF-2F2B-4FF4-B45D-3D7F8AC43D8D}
Primary Connections
Protocol: TCP - Outbound
PortLow: 7070
PortHigh: 7070
** PNM - RealNetworks protocol (Server)
Description : RealNetworks Streaming Media protocol (PNM) - Server
Guid: {17844508-CBC3-48C3-BC5B-723E99B6B95A}
Primary Connections
Protocol: TCP - Inbound
PortLow: 7070
PortHigh: 7070
** RTSP
Description : Real Time Streaming Protocol - Client
Guid: {D8D4D4A5-B30E-40A5-8061-C7CD7C1B9179}
Primary Connections
Protocol: TCP - Outbound
PortLow: 554
PortHigh: 554
** RTSP Server
Description : Real Time Streaming Protocol - Server
Guid: {D0F0EC38-CFAD-42ED-B86B-CEFB71CC6936}
Primary Connections
Protocol: TCP - Inbound
PortLow: 554
PortHigh: 554
Vendor: Microsoft
Version: 3.0
Settings:
RtspTransportList =
RTP/AVP;UDP,X-REAL-RDT/UDP;UDP,X-REAL-RDT/TCP;TCP,X-PN-TNG/UDP;UDP,X-PN-TNG/TCP;TCP

HTTP Redirector Filter
Description : Redirects requests from Firewall and SecureNAT clients to the
Web Proxy service
Enabled: True
GUID: {67DD9952-F6F9-11D2-A9E5-0000F8773208}
Protocols
Vendor: Microsoft
Version: 3.0
Settings:
State = Redirect to local Web Proxy service.

FTP Access Filter
Description : Enables FTP protocols (client and server)
Enabled: True
GUID: {680A928F-22B3-11D1-B026-0000F87750CB}
Protocols
** FTP
Description : FTP Protocol
Guid: {F2E5EE50-030C-11D3-ACD4-00A0C9D7559D}
Primary Connections
Protocol: TCP - Outbound
PortLow: 21
PortHigh: 21
** FTP Download only
Description : FTP Download only Protocol
Guid: {90B63894-2533-42EC-B7F6-A899F43F4AAE}
Primary Connections
Protocol: TCP - Outbound
PortLow: 21
PortHigh: 21
** FTP Server
Description : FTP Server Protocol
Guid: {5CDDC642-932D-4134-A1DB-250574052D00}
Primary Connections
Protocol: TCP - Inbound
PortLow: 21
PortHigh: 21
Vendor: Microsoft
Version: 3.0
Settings:

DNS intrusion detection filter
Description : Intercepts and analyzes DNS traffic destined for the internal
network
Enabled: True
GUID: {9649A5E0-52A4-4E2A-831D-DE093CCB6B05}
Protocols
Vendor: Internet Security Systems (ISS), Inc.
Version: 3.0
Settings:
DNS_Hostname_Overflow = 1
DNS_Length_Overflow = 1
DNS_Zone_High_Port = 1
DNS_Zone_Transfer = 1

POP intrusion detection filter
Description : Checks for POP buffer overflow attacks
Enabled: True
GUID: {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4}
Protocols
Vendor: Internet Security Systems (ISS), Inc.
Version: 3.0
Settings:

RPC Filter
Description : Enables publishing of RPC servers
Enabled: True
GUID: {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB}
Protocols
** Any RPC Server
Description : Allows all RPC interfaces
Guid: {E4BF0A2E-D51D-48CE-9FBC-19A694413833}
Primary Connections
Protocol: TCP - Inbound
PortLow: 135
PortHigh: 135
** UUID: {D84A98AA-12BD-4E31-9114-9AF0FBD81570}
Type = 1
Comment = Pseudo UUID, enables all RPC uuids
** Exchange RPC Server
Description : Allows publishing Exchange server for RPC access from
external network
Guid: {2297692C-E2E7-40BD-9A32-5F4D49455AA5}
Primary Connections
Protocol: TCP - Inbound
PortLow: 135
PortHigh: 135
** UUID: {0E4A0156-DD5D-11D2-8C2F-00C04FB6BCDE}
Type = 1
Comment = Information Store (1)
** UUID: {10F24E8E-0FA6-11D2-A910-00C04F990F3B}
Type = 1
Comment = Information Store (3)
** UUID: {1453C42C-0FA6-11D2-A910-00C04F990F3B}
Type = 1
Comment = Information Store (2)
** UUID: {1544F5E0-613C-11D1-93DF-00C04FD7BD09}
Type = 1
Comment = Directory RFR
** UUID: {1A190310-BB9C-11CD-90F8-00AA00466520}
Type = 1
Comment = Database
** UUID: {38A94E72-A9BC-11D2-8FAF-00C04fA378FF}
Type = 1
Comment = MTA 'QAdmin'
** UUID: {469D6EC0-0D87-11CE-B13F-00AA003BAC6C}
Type = 1
Comment = System Attendant Public Interface
** UUID: {83D72BF0-0D89-11CE-B13F-00AA003BAC6C}
Type = 1
Comment = System Attendant Private
** UUID: {89742ACE-A9ED-11CF-9C0C-08002BE7AE86}
Type = 1
Comment = Store admin (2)
** UUID: {99E64010-B032-11D0-97A4-00C04FD6551D}
Type = 1
Comment = Store admin (1)
** UUID: {9E8EE830-4459-11CE-979B-00AA005FFEBE}
Type = 1
Comment = MTA
** UUID: {A4F1DB00-CA47-1067-B31E-00DD010662DA}
Type = 1
Comment = Store admin (3)
** UUID: {A4F1DB00-CA47-1067-B31F-00DD010662DA}
Type = 1
Comment = Store EMSMDB
** UUID: {F5CC59B4-4264-101A-8C59-08002B2F8426}
Type = 1
Comment = Directory DRS
** UUID: {F5CC5A18-4264-101A-8C59-08002B2F8426}
Type = 1
Comment = Directory NSP
** UUID: {F5CC5A7C-4264-101A-8C59-08002B2F8426}
Type = 1
Comment = Directory XDS
** UUID: {F930C514-1215-11D3-99A5-00A0C9B61B04}
Type = 1
Comment = System Attendant Cluster
Vendor: Microsoft
Version: 3.0
Settings:

H.323 Filter
Description : Microsoft H.323 filter
Enabled: False
GUID: {FE440D49-AB26-11D2-A101-00C04FB6CFB6}
Protocols
** H.323 Protocol
Description : H.323 protocol - Allow Q.931/H.245/RTP/RTCP/T.120
Guid: {41192800-1D25-11D3-8F7C-00C04F57B90B}
Primary Connections
Protocol: TCP - Outbound
PortLow: 1720
PortHigh: 1720
Vendor: Microsoft
Version: 3.0
Settings:
AllowOutgoingCalls = True
AllowVideo = True
AllowIncomingCalls = True
UseLRQ = False
AllowT120 = True
AllowAudio = True
GKLocation =

************************************************** **************
WEB FILTERS
************************************************** **************
No Web Filters found

************************************************** **************
NETWORK CONFIGURATION
************************************************** **************
To route requests to upstream servers :
Use Primary Connection

************************************************** **************
ROUTING RULES
************************************************** **************
Default rule
Description :
Enabled : True
Order : 1
Rule Applies to : All Destinations
Process Requests by : Retrieving them directly from the specified
destination
Use DialUp Entry for Primary Route : False
Use DialUp Entry for Backup Route : False

Search cache for : A valid version of the object, retrieve If necessary
Cache Content : If source and request headers indicate to cache
Redirect HTTP requests as : HTTP Requests
Redirect SSL requests as : HTTP Requests
Require SSL for Published Site : False

************************************************** **************
LAT
************************************************** **************
Description :
From : 10.0.0.0
To : 10.255.255.255

************************************************** **************
LDT
************************************************** **************
*.GTC.local
Description :

************************************************** **************
FIREWALL CLIENT CONFIGURATION
************************************************** **************
Clients Connect to ISA Server by DNS Name : GTCSBS03
Enable ISA Firewall automatic discovery in Firewall Client : False
Application Settings:
exchng32
Disable = 0
icq
RemoteBindUdpPorts = 0
ServerBindTcpPorts = 0,1025-5000
NameResolutionForLocalHost = P
inetinfo
Disable = 1
kernel32
Disable = 1
lsass
Disable = 1
mapisp32
Disable = 0
net2fone
ServerBindTcpPorts = 0
outlook
Disable = 0
raplayer
RemoteBindUdpPorts = 6970-7170
LocalBindTcpPorts = 7070
realplay
RemoteBindUdpPorts = 6970-7170
LocalBindTcpPorts = 7070
rpcss
Disable = 1
rvplayer
RemoteBindUdpPorts = 6970-7170
LocalBindTcpPorts = 7070
services
Disable = 1
spoolss
Disable = 1
svchost
Disable = 1
w3proxy
Disable = 1
winlogon
Disable = 1
wspsrv
Disable = 1

************************************************** **************
WEB BROWSER CONFIGURATION
************************************************** **************
Configure web browser during firewall client setup : True
DNS Name : GTCSBS03
Automatically discover settings : False

Bypass proxy for local servers : True
Directly access computers specified in the LDT : True
Directly access these servers or domains :

If ISA Server is unavailable, use backup route : False

************************************************** **************
SERVER PROPERTIES
************************************************** **************
Server : GTCSBS03

ISA FQDN : gtcsbs03.GTC.local
Description :
ISA Product ID : 53941-880-4487192-97537
ISA Version : 3.0.1200.166 SP1
Created : 4/10/2005 11:22:20 PM
Domain Controller :
Intra Array Address : 10.0.0.3
Installation Folder : C:\Program Files\Microsoft ISA Server
Load Factor : 100

HARDWARE INFO
MFR: To Be Filled By O.E.M.
Model: To Be Filled By O.E.M.
Description: AT/AT COMPATIBLE
2047 MB RAM

VMEM INFO
Location: C:\pagefile.sys
FileSystem: NTFS
Min Size: 2046 MB
Max Size: 4092 MB
Curr Size: 2047.48046875 MB

PROCESSOR INFO
CPU0
Type: AMD Opteron(tm) Processor 242 @ 1593 MHz
CPU Status: Unknown
Operating Status: Running/Full Power
L2 Cache Size: 1 KB
L2 Cache Speed: MHz

CPU1
Type: AMD Opteron(tm) Processor 242 @ 1593 MHz
CPU Status: Unknown
Operating Status: Running/Full Power
L2 Cache Size: 1 KB
L2 Cache Speed: MHz

OPERATING SYSTEM INFO
OS: Microsoft(R) Windows(R) Server 2003 for Small Business Server
Build: 5.2.3790
Service Pack: 0.0
WinDir: C:\WINDOWS
System Role: Primary Domain Controller
Domain: GTC.local

INSTALLED OS HOTFIXES
HotFix ID: Q147222
Description: No data available

HotFix ID: Q828026
Description: Windows Media Player Hotfix [See Q828026 for more information]

HotFix ID: KB867460
Description: Windows Server 2003 Hotfix - KB 867460

HotFix ID: KB886903
Description: Windows Server 2003 Hotfix - KB 886903

HotFix ID: SP1
Description: Microsoft .NET Framework 1.1 Service Pack 1

HotFix ID: KB870669
Description: Microsoft Data Access Components KB870669

HotFix ID: Q832483
Description: Security Update for Microsoft Data Access Components

HotFix ID: Q828026
Description: Windows Media Player Hotfix [See Q828026 for more information]

HotFix ID: Q828026
Description: Windows Media Player Hotfix [See Q828026 for more information]

HotFix ID: KB885492
Description: Windows Media Player 9 Hotfix [See KB885492 for more
information]

HotFix ID: KB819696
Description: Windows Server 2003 Hotfix - KB 819696

HotFix ID: KB822132
Description: Windows Server 2003 Hotfix - KB 822132

HotFix ID: KB822742
Description: Windows Server 2003 Hotfix - KB 822742

HotFix ID: KB822743
Description: Windows Server 2003 Hotfix - KB 822743

HotFix ID: KB822744
Description: Windows Server 2003 Hotfix - KB 822744

HotFix ID: KB822745
Description: Windows Server 2003 Hotfix - KB 822745

HotFix ID: KB822925
Description: Windows Server 2003 Hotfix - KB 822925

HotFix ID: KB823182
Description: Windows Server 2003 Hotfix - KB 823182

HotFix ID: KB823353
Description: Windows Server 2003 Hotfix - KB 823353

HotFix ID: KB823559
Description: Windows Server 2003 Hotfix - KB 823559

HotFix ID: KB823980
Description: Windows Server 2003 Hotfix - KB 823980

HotFix ID: KB824073
Description: Windows Server 2003 Hotfix - KB 824073

HotFix ID: KB824105
Description: Windows Server 2003 Hotfix - KB 824105

HotFix ID: KB824139
Description: Windows Server 2003 Hotfix - KB 824139

HotFix ID: KB824141
Description: Windows Server 2003 Hotfix - KB 824141

HotFix ID: KB824146
Description: Windows Server 2003 Hotfix - KB 824146

HotFix ID: KB824151
Description: Windows Server 2003 Hotfix - KB 824151

HotFix ID: KB825117
Description: Windows Server 2003 Hotfix - KB 825117

HotFix ID: KB825119
Description: Windows Server 2003 Hotfix - KB 825119

HotFix ID: KB826238
Description: Windows Server 2003 Hotfix - KB 826238

HotFix ID: KB826936
Description: Windows Server 2003 Hotfix - KB 826936

HotFix ID: KB828035
Description: Windows Server 2003 Hotfix - KB 828035

HotFix ID: KB828741
Description: Windows Server 2003 Hotfix - KB 828741

HotFix ID: KB833987
Description: Windows Server 2003 Hotfix - KB 833987

HotFix ID: KB834707
Description: Windows Server 2003 Hotfix - KB 834707

HotFix ID: KB835732
Description: Windows Server 2003 Hotfix - KB 835732

HotFix ID: KB837001
Description: Windows Server 2003 Hotfix - KB 837001

HotFix ID: KB838894
Description: Windows Server 2003 Hotfix - KB 838894

HotFix ID: KB839645
Description: Windows Server 2003 Hotfix - KB 839645

HotFix ID: KB840315
Description: Windows Server 2003 Hotfix - KB 840315

HotFix ID: KB840374
Description: Windows Server 2003 Hotfix - KB 840374

HotFix ID: KB840987
Description: Windows Server 2003 Hotfix - KB 840987

HotFix ID: KB841356
Description: Windows Server 2003 Hotfix - KB 841356

HotFix ID: KB841533
Description: Windows Server 2003 Hotfix - KB 841533

HotFix ID: KB842773
Description: Windows Server 2003 Hotfix - KB 842773

HotFix ID: KB867282
Description: Windows Server 2003 Hotfix - KB 867282

HotFix ID: KB867460
Description: Windows Server 2003 Hotfix - KB 867460

HotFix ID: KB870763
Description: Windows Server 2003 Hotfix - KB 870763

HotFix ID: KB871250
Description: Windows Server 2003 Hotfix - KB 871250

HotFix ID: KB873333
Description: Windows Server 2003 Hotfix - KB 873333

HotFix ID: KB873376
Description: Windows Server 2003 Hotfix - KB 873376

HotFix ID: KB883646
Description: Windows Server 2003 Hotfix - KB 883646

HotFix ID: KB883935
Description: Windows Server 2003 Hotfix - KB 883935

HotFix ID: KB885250
Description: Windows Server 2003 Hotfix - KB 885250

HotFix ID: KB885834
Description: Windows Server 2003 Hotfix - KB 885834

HotFix ID: KB885835
Description: Windows Server 2003 Hotfix - KB 885835

HotFix ID: KB885836
Description: Windows Server 2003 Hotfix - KB 885836

HotFix ID: KB885881
Description: Windows Server 2003 Hotfix - KB 885881

HotFix ID: KB886903
Description: Windows Server 2003 Hotfix - KB 886903

HotFix ID: KB888113
Description: Windows Server 2003 Hotfix - KB 888113

HotFix ID: KB890047
Description: Windows Server 2003 Hotfix - KB 890047

HotFix ID: KB890175
Description: Windows Server 2003 Hotfix - KB 890175

HotFix ID: KB890859
Description: Windows Server 2003 Hotfix - KB890859

HotFix ID: KB890923
Description: Windows Server 2003 Hotfix - KB890923

HotFix ID: KB891711
Description: Windows Server 2003 Hotfix - KB 891711

HotFix ID: KB891781
Description: Windows Server 2003 Hotfix - KB 891781

HotFix ID: KB893066
Description: Windows Server 2003 Hotfix - KB893066

HotFix ID: KB893086
Description: Windows Server 2003 Hotfix - KB893086

HotFix ID: KB832880
Description: Windows Small Business Server 2003 Hotfix - KB 832880

HotFix ID: KB872769
Description: Windows Small Business Server 2003 Hotfix - KB 872769

************************************************** **************
INSTALLED ISA HOTFIXES
************************************************** **************
Small Business Server 2003 release

Service Pack 1
Files :
browser.map,bwserver.dll,dailysum.exe,fltrsnk1.dll ,ftpfltr.dll,gkadm.dll,gksvc.dll,h323asn1.dll,h323 fltr.dll,h323snap.dll,hfperf.dll,httpadm.dll,httpf ltr.dll,issdnsad.dll,issfltr.dll,latui.dll,msfpc.d ll,msfpccom.dll,msfpcsnp.dll,msfpcui.dll,mspadmin. exe,mspapi.dll,mspfltex.sys,msphlpr.dll,mspmsg.dll ,mspnat.sys,os.map,prxatq.dll,repgen.exe,repsnap.d ll,rpcfltr.dll,rws32.dll,smtpcred.exe,smtpfadm.dll ,smtpfltr.dll,socksadm.dll,socksflt.dll,stpext32.d ll,stpsrvex.dll,strmadmn.dll,strmfltr.dll,sumgen.d ll,vps2.dll,w3prefch.exe,w3proxy.exe,wspcpl32.cpl, wspsrv.exe,wspwsp.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 313249

Hotfix Number : SP1.177
Files : w3pinet.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 323889

Hotfix Number : SP1.255
Files :
mspfltex.sys,mspadmin.exe,wspsrv.exe,os.map,w3prox y.exe,msphlpr.dll,bwcpmon.dll,bwserver.dll,h323flt r.dll,hfperf.dll,mspmon.dll,socksflt.dll,socksprf. dll,wspperf.dll,fltrsnk1.dll,msfpccom.dll,msfpcsnp .dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 331062

Hotfix Number : SP1.256
Files : issfltr.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 331065

Hotfix Number : SP1.257
Files : mspadmin.exe,msphlpr.dll,w3proxy.exe,wspsrv.exe
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 331066

Hotfix Number : SP1.265
Files : wspwsp.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 815051

Hotfix Number : SP1.277
Files :
10053.htm,10053r.htm,10054.htm,10054r.htm,10060.ht m,10060r.htm,10061.htm,10061r.htm,11001.htm,11001r .htm,11002.htm,11002r.htm,11004.htm,11004r.htm,122 06.htm,12206r.htm,1460.htm,1460r.htm,401r.htm,407. htm,502.htm,502r.htm,504.htm,504r.htm,64.htm,64r.h tm,default.htm,defaultr.htm,2r.htm
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 816456

Hotfix Number : SP1.285
Files : h323fltr.dll,h323asn1.dll,gksvc.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 816458

Hotfix Number : SP1.290
Files : latui.dll,stpsrvex.dll,w3pinet.dll
Installation Date : Sun Apr 10 23:22:26 2005

KB Article : 816457

************************************************** **************
ALERTS
************************************************** **************
Server Publishing Failure
Description : The server publishing rule is configured incorrectly.
Active Since : 5/16/2005 10:16:38 AM

Service shutdown
Description : The service was stopped gracefully.
Active Since : 5/12/2005 12:46:54 PM

Service started
Description : Service started.
Active Since : 5/11/2005 6:10:26 PM

************************************************** **************
ALERTS CONFIGURATION
************************************************** **************
Alert action failure (The action associated with this alert failed.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache container initialization error (The cache container initialization
failed and the initialization was ignored.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache container recovery complete (Recovery of a single cache container was
completed.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache file resize failure (The operation to reduce the size of the cache
file failed.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache initialization failure (The Web cache proxy was disabled because of a
global failure.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache restoration completed (The cache content restoration was completed.)
Enabled: True
Log event = True
Action = Log to Event Log

Cache write error (There was a failure in writing content to the cache.)
Enabled: True
Log event = True
Action = Log to Event Log

Cached object discarded (During cache recovery, an object with conflicting
information was detected. The conflicting object was discarded.)
Enabled: False
Log event = True
Action = Log to Event Log

Component load failure (Failed to load an extension component.)
Enabled: True
Log event = True
Action = Log to Event Log

Configuration error (An error occurred while reading configuration
information.)
Enabled: True
Log event = True
Action = Log to Event Log

Dial-on-demand failure (Failed to create a dial-on-demand connection, either
because there is no answer or the line is busy.)
Enabled: True
Log event = True
Action = Log to Event Log

DNS intrusion (A host name overflow, length overflow, zone high port, or
zone transfer attack occurred.)
Enabled: True
Log event = True
Action = Log to Event Log

Event log failure (An attempt to log the event information to the system
event log failed.)
Enabled: False
Log event = True
Action = Run Command 'Net send localhost event log failure'

Firewall communication failure (There is a failure in communication between
the Firewall client and the ISA Server Firewall service.)
Enabled: True
Log event = True
Action = Log to Event Log

Intrusion detected (An intrusion was attempted by an external user.)
Enabled: True
Log event = True
Action = Log to Event Log

Invalid dial-on-demand credentials (Dial-on-demand credentials are invalid.)
Enabled: True
Log event = True
Action = Log to Event Log

Invalid ODBC log credentials. (The specified user name or password for this
ODBC database is invalid.)
Enabled: True
Log event = True
Action = Log to Event Log

IP packet dropped (IP packet was dropped according to specified policy.)
Enabled: False
Log event = True
Action = Log to Event Log

IP Protocol violation (A packet with invalid IP options was detected and the
packet dropped.)
Enabled: False
Log event = True
Action = Log to Event Log

IP spoofing (The IP packet source address is not valid.)
Enabled: True
Log event = True
Action = Log to Event Log

Log failure (One of the service logs failed.)
Enabled: True
Log event = True
Action = Log to Event Log

Missing installation component (A component that was configured for the
array is missing on this server.)
Enabled: True
Log event = True
Action = Log to Event Log

Network configuration changed (A network configuration change that affects
ISA Server was detected.)
Enabled: False
Log event = True
Action = Log to Event Log

No available ports (Failed to create a network socket because there are no
available ports)
Enabled: True
Log event = True
Action = Log to Event Log

OS component conflict (There is a conflict with one of the operating system
components: NAT editor, ICS, or RRAS.)
Enabled: True
Log event = True
Action = Log to Event Log

Oversized UDP packet (ISA Server dropped a UDP packet because it exceeded
the maximum UDP packet size, as specified in the registry key.)
Enabled: True
Log event = True
Action = Log to Event Log

POP Intrusion (POP buffer overflow detected)
Enabled: True
Log event = True
Action = Log to Event Log

Report Summary Generation Failure (An error occurred while generating a
report summary from log files)
Enabled: True
Log event = True
Action = Log to Event Log

Resource allocation failure (A resource allocation failure has occurred. For
example, insufficient memory resources.)
Enabled: True
Log event = True
Action = Log to Event Log

Routing (chaining) failure (The ISA Server failed to route the request to an
upstream server.)
Enabled: True
Log event = True
Action = Log to Event Log

Routing (chaining) recovery (The ISA Server resumed routing to an upstream
server.)
Enabled: True
Log event = True
Action = Log to Event Log

RPC Filter - connectivity changed (The connectivity to the publishing RPC
service changed)
Enabled: True
Log event = True
Action = Log to Event Log

Server Publishing Failure (The server publishing rule is configured
incorrectly.)
Enabled: True
Log event = True
Action = Log to Event Log

Server publishing is not applicable. (The server publishing rule cannot be
applied.)
Enabled: False
Log event = True
Action = Log to Event Log

Server Publishing Recovery (The server publishing rule can now be applied.)
Enabled: True
Log event = True
Action = Log to Event Log

Service Initialization failure (The service failed to initialize.)
Enabled: True
Log event = True
Action = Log to Event Log

Service not responding (An ISA Server service terminated or stopped
functioning unexpectedly.)
Enabled: True
Log event = True
Action = Log to Event Log

Service shutdown (The service was stopped gracefully.)
Enabled: True
Log event = True
Action = Log to Event Log

Service started (Service started.)
Enabled: True
Log event = True
Action = Log to Event Log

SMTP Filter event (An SMTP command rule was violated)
Enabled: True
SMTP Filter event = True
Action = Log to Event Log

SOCKS configuration failure (The port specified in SOCKS properties is in
use by another protocol.)
Enabled: True
Log event = True
Action = Log to Event Log

The server is not in the array's site (All members of the array must be in
the same site. This server is in a different site.)
Enabled: True
Log event = True
Action = Log to Event Log

Unregistered event (An unregistered event occurred.)
Enabled: True
Log event = True
Action = Log to Event Log

Upstream chaining credentials (Upstream chaining credentials are invalid.)
Enabled: True
Log event = True
Action = Log to Event Log

WMT live stream splitting failure (The streaming application filter
encounter an error during WMT live stream splitting)
Enabled: True
Log event = True
Action = Log to Event Log

************************************************** **************
SERVICES AND DRIVERS
************************************************** **************
** ISA Service States
Web Proxy Service :
Status : Running
Sessions : 0
Uptime : 113671 seconds

Firewall Service :
Status : Running
Sessions : 2
Uptime : 113672 seconds

Scheduled Content Download Service :
Status : Running

** Drivers
Abiosdsk
DependOnSvc :
DependOnGrp :
Description : Abiosdsk
Name : Abiosdsk
PathName :
Started : False
StartMode : Disabled
State : Stopped

Microsoft ACPI Driver
DependOnSvc :
DependOnGrp :
Description : Microsoft ACPI Driver
Name : ACPI
PathName : C:\WINDOWS\system32\DRIVERS\ACPI.sys
Started : True
StartMode : Boot
State : Running

ACPIEC
DependOnSvc :
DependOnGrp :
Description : ACPIEC
Name : ACPIEC
PathName : C:\WINDOWS\system32\drivers\ACPIEC.sys
Started : False
StartMode : Disabled
State : Stopped

adpu160m
DependOnSvc :
DependOnGrp :
Description : adpu160m
Name : adpu160m
PathName :
Started : False
StartMode : Disabled
State : Stopped

adpu320
DependOnSvc :
DependOnGrp :
Description : adpu320
Name : adpu320
PathName : C:\WINDOWS\system32\DRIVERS\adpu320.sys
Started : True
StartMode : Boot
State : Running

afcnt
DependOnSvc :
DependOnGrp :
Description : afcnt
Name : afcnt
PathName :
Started : False
StartMode : Disabled
State : Stopped

AFD Networking Support Environment
DependOnSvc :
DependOnGrp :
Description : AFD Networking Support Environment
Name : AFD
PathName : C:\WINDOWS\system32\drivers\afd.sys
Started : True
StartMode : Auto
State : Running

Aha154x
DependOnSvc :
DependOnGrp :
Description : Aha154x
Name : Aha154x
PathName :
Started : False
StartMode : Disabled
State : Stopped

aic78u2
DependOnSvc :
DependOnGrp :
Description : aic78u2
Name : aic78u2
PathName :
Started : False
StartMode : Disabled
State : Stopped

aic78xx
DependOnSvc :
DependOnGrp :
Description : aic78xx
Name : aic78xx
PathName :
Started : False
StartMode : Disabled
State : Stopped

AliIde
DependOnSvc :
DependOnGrp :
Description : AliIde
Name : AliIde
PathName :
Started : False
StartMode : Disabled
State : Stopped

amdbusdr
DependOnSvc :
DependOnGrp :
Description : amdbusdr
Name : amdbusdr
PathName : C:\WINDOWS\system32\DRIVERS\amdbusdr.sys
Started : True
StartMode : Boot
State : Running

AMD EIDE Driver
DependOnSvc :
DependOnGrp :
Description : AMD EIDE Driver
Name : AMDEIDE
PathName : C:\WINDOWS\system32\DRIVERS\AmdEide.sys
Started : True
StartMode : Boot
State : Running

AMDPCI
DependOnSvc :
DependOnGrp :
Description : AMDPCI
Name : AMDPCI
PathName : \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AMDPCI.sys
Started : False
StartMode : Manual
State : Stopped

RAS Asynchronous Media Driver
DependOnSvc :
DependOnGrp :
Description : RAS Asynchronous Media Driver
Name : AsyncMac
PathName : C:\WINDOWS\system32\DRIVERS\asyncmac.sys
Started : False
StartMode : Manual
State : Stopped

Standard IDE/ESDI Hard Disk Controller
DependOnSvc :
DependOnGrp :
Description : Standard IDE/ESDI Hard Disk Controller
Name : atapi
PathName : C:\WINDOWS\system32\DRIVERS\atapi.sys
Started : True
StartMode : Boot
State : Running

Atdisk
DependOnSvc :
DependOnGrp :
Description : Atdisk
Name : Atdisk
PathName :
Started : False
StartMode : Disabled
State : Stopped

ati2mpad
DependOnSvc :
DependOnGrp :
Description : ati2mpad
Name : ati2mpad
PathName : C:\WINDOWS\system32\DRIVERS\ati2mpad.sys
Started : True
StartMode : Manual
State : Running

ATM ARP Client Protocol
DependOnSvc : Tcpip
DependOnGrp :
Description : ATM ARP Client Protocol
Name : Atmarpc
PathName : C:\WINDOWS\system32\DRIVERS\atmarpc.sys
Started : False
StartMode : Manual
State : Stopped

Audio Stub Driver
DependOnSvc :
DependOnGrp :
Description : Audio Stub Driver
Name : audstub
PathName : C:\WINDOWS\system32\DRIVERS\audstub.sys
Started : True
StartMode : Manual
State : Running

Broadcom NetXtreme Gigabit Ethernet
DependOnSvc :
DependOnGrp :
Description : Broadcom NetXtreme Gigabit Ethernet
Name : b57w2k
PathName : C:\WINDOWS\system32\DRIVERS\b57xp32.sys
Started : True
StartMode : Manual
State : Running

Beep
DependOnSvc :
DependOnGrp :
Description : Beep
Name : Beep
PathName : C:\WINDOWS\system32\drivers\Beep.sys
Started : True
StartMode : System
State : Running

cbidf2k
DependOnSvc :
DependOnGrp :
Description : cbidf2k
Name : cbidf2k
PathName : C:\WINDOWS\system32\drivers\cbidf2k.sys
Started : False
StartMode : Disabled
State : Stopped

cd20xrnt
DependOnSvc :
DependOnGrp :
Description : cd20xrnt
Name : cd20xrnt
PathName :
Started : False
StartMode : Disabled
State : Stopped

Cdfs
DependOnSvc :
DependOnGrp : SCSI CDROM Class
Description : Cdfs
Name : Cdfs
PathName : C:\WINDOWS\system32\drivers\Cdfs.sys
Started : False
StartMode : Disabled
State : Stopped

CD-ROM Driver
DependOnSvc :
DependOnGrp : SCSI miniport
Description : CD-ROM Driver
Name : Cdrom
PathName : C:\WINDOWS\system32\DRIVERS\cdrom.sys
Started : False
StartMode : System
State : Stopped

Changer
DependOnSvc :
DependOnGrp :
Description : Changer
Name : Changer
PathName :
Started : False
StartMode : System
State : Stopped

Cluster Disk Driver
DependOnSvc :
DependOnGrp :
Description : Cluster Disk Driver
Name : ClusDisk
PathName : C:\WINDOWS\system32\DRIVERS\ClusDisk.sys
Started : False
StartMode : Disabled
State : Stopped

CmdIde
DependOnSvc :
DependOnGrp :
Description : CmdIde
Name : CmdIde
PathName :
Started : False
StartMode : Disabled
State : Stopped

Microsoft Composite Battery Driver
DependOnSvc :
DependOnGrp :
Description : Microsoft Composite Battery Driver
Name : Compbatt
PathName : C:\WINDOWS\system32\DRIVERS\compbatt.sys
Started : True
StartMode : Boot
State : Running

Cpqarray
DependOnSvc :
DependOnGrp :
Description : Cpqarray
Name : Cpqarray
PathName :
Started : False
StartMode : Disabled
State : Stopped

cpqarry2
DependOnSvc :
DependOnGrp :
Description : cpqarry2
Name : cpqarry2
PathName :
Started : False
StartMode : Disabled
State : Stopped

cpqcissm
DependOnSvc :
DependOnGrp :
Description : cpqcissm
Name : cpqcissm
PathName :
Started : False
StartMode : Disabled
State : Stopped

cpqfcalm
DependOnSvc :
DependOnGrp :
Description : cpqfcalm
Name : cpqfcalm
PathName :
Started : False
StartMode : Disabled
State : Stopped

CRC Disk Filter Driver
DependOnSvc :
DependOnGrp :
Description : CRC Disk Filter Driver
Name : crcdisk
PathName : C:\WINDOWS\system32\DRIVERS\crcdisk.sys
Started : True
StartMode : Boot
State : Running

dac960nt
DependOnSvc :
DependOnGrp :
Description : dac960nt
Name : dac960nt
PathName :
Started : False
StartMode : Disabled
State : Stopped

dellcerc
DependOnSvc :
DependOnGrp :
Description : dellcerc
Name : dellcerc
PathName :
Started : False
StartMode : Disabled
State : Stopped

DfsDriver
DependOnSvc :
DependOnGrp :
Description : DfsDriver
Name : DfsDriver
PathName : C:\WINDOWS\system32\drivers\Dfs.sys
Started : True
StartMode : Boot
State : Running

Disk Driver
DependOnSvc :
DependOnGrp : SCSI miniport
Description : Disk Driver
Name : Disk
PathName : C:\WINDOWS\system32\DRIVERS\disk.sys
Started : True
StartMode : Boot
State : Running

dlttape
DependOnSvc :
DependOnGrp :
Description : dlttape
Name : dlttape
PathName : C:\WINDOWS\system32\DRIVERS\dlttape.sys
Started : False
StartMode : Manual
State : Stopped

dmboot
DependOnSvc :
DependOnGrp :
Description : dmboot
Name : dmboot
PathName : C:\WINDOWS\system32\drivers\dmboot.sys
Started : False
StartMode : Disabled
State : Stopped

Logical Disk Manager Driver
DependOnSvc :
DependOnGrp :
Description : Logical Disk Manager Driver
Name : dmio
PathName : C:\WINDOWS\system32\drivers\dmio.sys
Started : True
StartMode : Boot
State : Running

dmload
DependOnSvc :
DependOnGrp :
Description : dmload
Name : dmload
PathName : C:\WINDOWS\system32\drivers\dmload.sys
Started : True
StartMode : Boot
State : Running

dpti2o
DependOnSvc :
DependOnGrp :
Description : dpti2o
Name : dpti2o
PathName :
Started : False
StartMode : Disabled
State : Stopped

drvmcdb
DependOnSvc :
DependOnGrp :
Description : drvmcdb
Name : drvmcdb
PathName : C:\WINDOWS\system32\DRIVERS\drvmcdb.sys
Started : True
StartMode : Boot
State : Running

DS1410D
DependOnSvc :
DependOnGrp :
Description : DS1410D
Name : DS1410D
PathName : C:\WINDOWS\system32\drivers\DS1410D.SYS
Started : False
StartMode : Auto
State : Stopped

EXIFS
DependOnSvc :
DependOnGrp :
Description : EXIFS
Name : EXIFS
PathName : \??\C:\WINDOWS\system32\drivers\exifs.sys
Started : True
StartMode : Auto
State : Running

Fastfat
DependOnSvc :
DependOnGrp :
Description : Fastfat
Name : Fastfat
PathName : C:\WINDOWS\system32\drivers\Fastfat.sys
Started : True
StartMode : Disabled
State : Running

Floppy Disk Controller Driver
DependOnSvc :
DependOnGrp :
Description : Floppy Disk Controller Driver
Name : Fdc
PathName : C:\WINDOWS\system32\DRIVERS\fdc.sys
Started : True
StartMode : Manual
State : Running

Fips
DependOnSvc :
DependOnGrp :
Description : Fips
Name : Fips
PathName : C:\WINDOWS\system32\drivers\Fips.sys
Started : True
StartMode : System
State : Running

Floppy Disk Driver
DependOnSvc :
DependOnGrp :
Description : Floppy Disk Driver
Name : Flpydisk
PathName : C:\WINDOWS\system32\DRIVERS\flpydisk.sys
Started : True
StartMode : Manual
State : Running

Volume Manager Driver
DependOnSvc :
DependOnGrp :
Description : Volume Manager Driver
Name : Ftdisk
PathName : C:\WINDOWS\system32\DRIVERS\ftdisk.sys
Started : True
StartMode : Boot
State : Running

Generic Packet Classifier
DependOnSvc :
DependOnGrp :
Description : Generic Packet Classifier
Name : Gpc
PathName : C:\WINDOWS\system32\DRIVERS\msgpc.sys
Started : True
StartMode : Manual
State : Running

HID UPS Battery Driver
DependOnSvc :
DependOnGrp :
Description : HID UPS Battery Driver
Name : HidBatt
PathName : C:\WINDOWS\system32\DRIVERS\HidBatt.sys
Started : True
StartMode : Manual
State : Running

Microsoft HID Class Driver
DependOnSvc :
DependOnGrp :
Description : Microsoft HID Class Driver
Name : HidUsb
PathName : C:\WINDOWS\system32\DRIVERS\hidusb.sys
Started : True
StartMode : Manual
State : Running

hpn
DependOnSvc :
DependOnGrp :
Description : hpn
Name : hpn
PathName :
Started : False
StartMode : Disabled
State : Stopped

hpqdlt
DependOnSvc :
DependOnGrp :
Description : hpqdlt
Name : hpqdlt
PathName : C:\WINDOWS\system32\DRIVERS\hpdltw32.sys
Started : False
StartMode : Manual
State : Stopped

hpt3xx
DependOnSvc :
DependOnGrp :
Description : hpt3xx
Name : hpt3xx
PathName :
Started : False
StartMode : Disabled
State : Stopped

HTTP
DependOnSvc :
DependOnGrp :
Description : HTTP
Name : HTTP
PathName : C:\WINDOWS\system32\Drivers\HTTP.sys
Started : True
StartMode : Manual
State : Running

i2omgmt
DependOnSvc :
DependOnGrp :
Description : i2omgmt
Name : i2omgmt
PathName :
Started : False
StartMode : System
State : Stopped

i2omp
DependOnSvc :
DependOnGrp :
Description : i2omp
Name : i2omp
PathName :
Started : False
StartMode : Disabled
State : Stopped

i8042 Keyboard and PS/2 Mouse Port Driver
DependOnSvc :
DependOnGrp :
Description : i8042 Keyboard and PS/2 Mouse Port Driver
Name : i8042prt
PathName : C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Started : True
StartMode : System
State : Running

iirsp
DependOnSvc :
DependOnGrp :
Description : iirsp
Name : iirsp
PathName :
Started : False
StartMode : Disabled
State : Stopped

CD-Burning Filter Driver
DependOnSvc :
DependOnGrp :
Description : CD-Burning Filter Driver
Name : imapi
PathName : C:\WINDOWS\system32\DRIVERS\imapi.sys
Started : False
StartMode : System
State : Stopped

IntelIde
DependOnSvc :
DependOnGrp :
Description : IntelIde
Name : IntelIde
PathName :
Started : False
StartMode : Disabled
State : Stopped

IP Traffic Filter Driver
DependOnSvc : tcpip
DependOnGrp :
Description : IP Traffic Filter Driver
Name : IpFilterDriver
PathName : \??\C:\WINDOWS\system32\drivers\ipfltdrv.sys
Started : True
StartMode : Auto
State : Running

IP in IP Tunnel Driver
DependOnSvc : Tcpip
DependOnGrp :
Description : IP in IP Tunnel Driver
Name : IpInIp
PathName : C:\WINDOWS\system32\DRIVERS\ipinip.sys
Started : False
StartMode : Manual
State : Stopped

IP Network Address Translator
DependOnSvc : Tcpip
DependOnGrp :
Description : IP Network Address Translator
Name : IpNat
PathName : C:\WINDOWS\system32\DRIVERS\ipnat.sys
Started : True
StartMode : Manual
State : Running

IPSEC driver
DependOnSvc :
DependOnGrp :
Description : IPSEC driver
Name : IPSec
PathName : C:\WINDOWS\system32\DRIVERS\ipsec.sys
Started : True
StartMode : System
State : Running

ipsraidn
DependOnSvc :
DependOnGrp :
Description : ipsraidn
Name : ipsraidn
PathName :
Started : False
StartMode : Disabled
State : Stopped

IR Enumerator Service
DependOnSvc :
DependOnGrp :
Description : IR Enumerator Service
Name : IRENUM
PathName : C:\WINDOWS\system32\DRIVERS\irenum.sys
Started : False
StartMode : Manual
State : Stopped

PnP ISA/EISA Bus Driver
DependOnSvc :
DependOnGrp :
Description : PnP ISA/EISA Bus Driver
Name : isapnp
PathName : C:\WINDOWS\system32\DRIVERS\isapnp.sys
Started : True
StartMode : Boot
State : Running

Keyboard Class Driver
DependOnSvc :
DependOnGrp :
Description : Keyboard Class Driver
Name : Kbdclass
PathName : C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Started : True
StartMode : System
State : Running

KSecDD
DependOnSvc :
DependOnGrp :
Description : KSecDD
Name : KSecDD
PathName : C:\WINDOWS\system32\drivers\KSecDD.sys
Started : True
StartMode : Boot
State : Running

lp6nds35
DependOnSvc :
DependOnGrp :
Description : lp6nds35
Name : lp6nds35
PathName :
Started : False
StartMode : Disabled
State : Stopped

mnmdd
DependOnSvc :
DependOnGrp :
Description : mnmdd
Name : mnmdd
PathName : C:\WINDOWS\system32\drivers\mnmdd.sys
Started : True
StartMode : System
State : Running

Modem
DependOnSvc :
DependOnGrp :
Description : Modem
Name : Modem
PathName : C:\WINDOWS\system32\drivers\Modem.sys
Started : False
StartMode : Manual
State : Stopped

Mouse Class Driver
DependOnSvc :
DependOnGrp :
Description : Mouse Class Driver
Name : Mouclass
PathName : C:\WINDOWS\system32\DRIVERS\mouclass.sys
Started : True
StartMode : System
State : Running

Mount Point Manager
DependOnSvc :
DependOnGrp :
Description : Mount Point Manager
Name : MountMgr
PathName : C:\WINDOWS\system32\drivers\MountMgr.sys
Started : True
StartMode : Boot
State : Running

mraid35x
DependOnSvc :
DependOnGrp :
Description : mraid35x
Name : mraid35x
PathName :
Started : False
StartMode : Disabled
State : Stopped

WebDav Client Redirector
DependOnSvc :
DependOnGrp :
Description : WebDav Client Redirector
Name : MRxDAV
PathName : C:\WINDOWS\system32\DRIVERS\mrxdav.sys
Started : True
StartMode : Manual
State : Running

MRXSMB
DependOnSvc :
DependOnGrp :
Description : MRXSMB
Name : MRxSmb
PathName : C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
Started : True
StartMode : System
State : Running

Msfs
DependOnSvc :
DependOnGrp :
Description : Msfs
Name : Msfs
PathName : C:\WINDOWS\system32\drivers\Msfs.sys
Started : True
StartMode : System
State : Running

ISA Server Packet Filter Extension Driver
DependOnSvc : IpFilterDriver
DependOnGrp :
Description : ISA Server Packet Filter Extension Driver
Name : MspFltEx
PathName : \??\C:\WINDOWS\system32\drivers\mspfltex.sys
Started : True
StartMode : Auto
State : Running

ISA Server Network Address Translation (NAT) Driver
DependOnSvc : IpFilterDriver ipnat
DependOnGrp :
Description : ISA Server Network Address Translation (NAT) Driver
Name : MspNAT
PathName : \??\C:\WINDOWS\system32\drivers\mspnat.sys
Started : True
StartMode : Auto
State : Running

Mup
DependOnSvc :
DependOnGrp :
Description : Mup
Name : Mup
PathName : C:\WINDOWS\system32\drivers\Mup.sys
Started : True
StartMode : Boot
State : Running

NAVENG
DependOnSvc :
DependOnGrp :
Description : NAVENG
Name : NAVENG
PathName :
\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\2005050 4.016\naveng.sys
Started : True
StartMode : Manual
State : Running

NAVEX15
DependOnSvc :
DependOnGrp :
Description : NAVEX15
Name : NAVEX15
PathName :
\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\2005050 4.016\navex15.sys
Started : True
StartMode : Manual
State : Running

NDIS System Driver
DependOnSvc :
DependOnGrp :
Description : NDIS System Driver
Name : NDIS
PathName : C:\WINDOWS\system32\drivers\NDIS.sys
Started : True
StartMode : Boot
State : Running

Remote Access NDIS TAPI Driver
DependOnSvc :
DependOnGrp :
Description : Remote Access NDIS TAPI Driver
Name : NdisTapi
PathName : C:\WINDOWS\system32\DRIVERS\ndistapi.sys
Started : True
StartMode : Manual
State : Running

NDIS Usermode I/O Protocol
DependOnSvc :
DependOnGrp :
Description : NDIS Usermode I/O Protocol
Name : Ndisuio
PathName : C:\WINDOWS\system32\DRIVERS\ndisuio.sys
Started : False
StartMode : Manual
State : Stopped

Remote Access NDIS WAN Driver
DependOnSvc :
DependOnGrp :
Description : Remote Access NDIS WAN Driver
Name : NdisWan
PathName : C:\WINDOWS\system32\DRIVERS\ndiswan.sys
Started : True
StartMode : Manual
State : Running

NDIS Proxy
DependOnSvc :
DependOnGrp :
Description : NDIS Proxy
Name : NDProxy
PathName : C:\WINDOWS\system32\drivers\NDProxy.sys
Started : True
StartMode : Manual
State : Running

NetBIOS Interface
DependOnSvc :
DependOnGrp :
Description : NetBIOS Interface
Name : NetBIOS
PathName : C:\WINDOWS\system32\DRIVERS\netbios.sys
Started : True
StartMode : System
State : Running

NetBios over Tcpip
DependOnSvc : Tcpip
DependOnGrp :
Description : NetBios over Tcpip
Name : NetBT
PathName : C:\WINDOWS\system32\DRIVERS\netbt.sys
Started : True
StartMode : System
State : Running

nfrd960
DependOnSvc :
DependOnGrp :
Description : nfrd960
Name : nfrd960
PathName :
Started : False
StartMode : Disabled
State : Stopped

Npfs
DependOnSvc :
DependOnGrp :
Description : Npfs
Name : Npfs
PathName : C:\WINDOWS\system32\drivers\Npfs.sys
Started : True
StartMode : System
State : Running

Ntfs
DependOnSvc :
DependOnGrp :
Description : Ntfs
Name : Ntfs
PathName : C:\WINDOWS\system32\drivers\Ntfs.sys
Started : True
StartMode : Disabled
State : Running

Null
DependOnSvc :
DependOnGrp :
Description : Null
Name : Null
PathName : C:\WINDOWS\system32\drivers\Null.sys
Started : True
StartMode : System
State : Running

Parallel port driver
DependOnSvc :
DependOnGrp :
Description : Parallel port driver
Name : Parport
PathName : C:\WINDOWS\system32\DRIVERS\parport.sys
Started : True
StartMode : Manual
State : Running

Partition Manager
DependOnSvc :
DependOnGrp :
Description : Partition Manager
Name : PartMgr
PathName : C:\WINDOWS\system32\drivers\PartMgr.sys
Started : True
StartMode : Boot
State : Running

Parvdm
DependOnSvc : Parport
DependOnGrp : Parallel arbitrator
Description : Parvdm
Name : Parvdm
PathName : C:\WINDOWS\system32\DRIVERS\parvdm.sys
Started : True
StartMode : Auto
State : Running

PCI Bus Driver
DependOnSvc :
DependOnGrp :
Description : PCI Bus Driver
Name : PCI
PathName : C:\WINDOWS\system32\DRIVERS\pci.sys
Started : True
StartMode : Boot
State : Running

PCIIde
DependOnSvc :
DependOnGrp :
Description : PCIIde
Name : PCIIde
PathName : C:\WINDOWS\system32\DRIVERS\pciide.sys
Started : True
StartMode : Boot
State : Running

Pcmcia
DependOnSvc :
DependOnGrp :
Description : Pcmcia
Name : Pcmcia
PathName : C:\WINDOWS\system32\drivers\Pcmcia.sys
Started : False
StartMode : Disabled
State : Stopped

PDCOMP
DependOnSvc :
DependOnGrp :
Description : PDCOMP
Name : PDCOMP
PathName :
Started : False
StartMode : Manual
State : Stopped

PDFRAME
DependOnSvc :
DependOnGrp :
Description : PDFRAME
Name : PDFRAME
PathName :
Started : False
StartMode : Manual
State : Stopped

PDRELI
DependOnSvc :
DependOnGrp :
Description : PDRELI
Name : PDRELI
PathName :
Started : False
StartMode : Manual
State : Stopped

PDRFRAME
DependOnSvc :
DependOnGrp :
Description : PDRFRAME
Name : PDRFRAME
PathName :
Started : False
StartMode : Manual
State : Stopped

perc2
DependOnSvc :
DependOnGrp :
Description : perc2
Name : perc2
PathName :
Started : False
StartMode : Disabled
State : Stopped

perc2hib
DependOnSvc :
DependOnGrp :
Description : perc2hib
Name : perc2hib
PathName :
Started : False
StartMode : Disabled
State : Stopped

WAN Miniport (PPTP)
DependOnSvc :
DependOnGrp :
Description : WAN Miniport (PPTP)
Name : PptpMiniport
PathName : C:\WINDOWS\system32\DRIVERS\raspptp.sys
Started : True
StartMode : Manual
State : Running

Processor Driver
DependOnSvc :
DependOnGrp :
Description : Processor Driver
Name : Processor
PathName : C:\WINDOWS\system32\DRIVERS\processr.sys
Started : True
StartMode : Manual
State : Running

QoS Packet Scheduler
DependOnSvc : Gpc
DependOnGrp :
Description : QoS Packet Scheduler
Name : PSched
PathName : C:\WINDOWS\system32\DRIVERS\psched.sys
Started : True
StartMode : Manual
State : Running

Direct Parallel Link Driver
DependOnSvc :
DependOnGrp :
Description : Direct Parallel Link Driver
Name : Ptilink
PathName : C:\WINDOWS\system32\DRIVERS\ptilink.sys
Started : True
StartMode : Manual
State : Running

ql1080
DependOnSvc :
DependOnGrp :
Description : ql1080
Name : ql1080
PathName :
Started : False
StartMode : Disabled
State : Stopped

Ql10wnt
DependOnSvc :
DependOnGrp :
Description : Ql10wnt
Name : Ql10wnt
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql12160
DependOnSvc :
DependOnGrp :
Description : ql12160
Name : ql12160
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql1240
DependOnSvc :
DependOnGrp :
Description : ql1240
Name : ql1240
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql1280
DependOnSvc :
DependOnGrp :
Description : ql1280
Name : ql1280
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql2100
DependOnSvc :
DependOnGrp :
Description : ql2100
Name : ql2100
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql2200
DependOnSvc :
DependOnGrp :
Description : ql2200
Name : ql2200
PathName :
Started : False
StartMode : Disabled
State : Stopped

ql2300
DependOnSvc :
DependOnGrp :
Description : ql2300
Name : ql2300
PathName :
Started : False
StartMode : Disabled
State : Stopped

QntmDLT
DependOnSvc :
DependOnGrp :
Description : QntmDLT
Name : QntmDLT
PathName : C:\WINDOWS\system32\DRIVERS\QntmDLT.sys
Started : True
StartMode : Manual
State : Running

Remote Access Auto Connection Driver
DependOnSvc :
DependOnGrp :
Description : Remote Access Auto Connection Driver
Name : RasAcd
PathName : C:\WINDOWS\system32\DRIVERS\rasacd.sys
Started : True
StartMode : System
State : Running

WAN Miniport (L2TP)
DependOnSvc :
DependOnGrp :
Description : WAN Miniport (L2TP)
Name : Rasl2tp
PathName : C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
Started : True
StartMode : Manual
State : Running

Remote Access PPPOE Driver
DependOnSvc :
DependOnGrp :
Description : Remote Access PPPOE Driver
Name : RasPppoe
PathName : C:\WINDOWS\system32\DRIVERS\raspppoe.sys
Started : True
StartMode : Manual
State : Running

Direct Parallel
DependOnSvc :
DependOnGrp :
Description : Direct Parallel
Name : Raspti
PathName : C:\WINDOWS\system32\DRIVERS\raspti.sys
Started : True
StartMode : Manual
State : Running

Rdbss
DependOnSvc :
DependOnGrp :
Description : Rdbss
Name : Rdbss
PathName : C:\WINDOWS\system32\DRIVERS\rdbss.sys
Started : True
StartMode : System
State : Running

RDPCDD
DependOnSvc :
DependOnGrp :
Description : RDPCDD
Name : RDPCDD
PathName : C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
Started : True
StartMode : System
State : Running

Terminal Server Device Redirector Driver
DependOnSvc :
DependOnGrp :
Description : Terminal Server Device Redirector Driver
Name : rdpdr
PathName : C:\WINDOWS\system32\DRIVERS\rdpdr.sys
Started : True
StartMode : Manual
State : Running

RDPWD
DependOnSvc :
DependOnGrp :
Description : RDPWD
Name : RDPWD
PathName : C:\WINDOWS\system32\drivers\RDPWD.sys
Started : True
StartMode : Manual
State : Running

Digital CD Audio Playback Filter Driver
DependOnSvc :
DependOnGrp :
Description : Digital CD Audio Playback Filter Driver
Name : redbook
PathName : C:\WINDOWS\system32\DRIVERS\redbook.sys
Started : False
StartMode : System
State : Stopped

SAVRT
DependOnSvc : SAVRTPEL
DependOnGrp :
Description : SAVRT
Name : SAVRT
PathName : \??\C:\Program Files\Symantec AntiVirus\savrt.sys
Started : True
StartMode : System
State : Running

SAVRTPEL
DependOnSvc :
DependOnGrp :
Description : SAVRTPEL
Name : SAVRTPEL
PathName : \??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys
Started : True
StartMode : Auto
State : Running

Secdrv
DependOnSvc :
DependOnGrp :
Description : Secdrv
Name : Secdrv
PathName : C:\WINDOWS\system32\DRIVERS\secdrv.sys
Started : False
StartMode : Manual
State : Stopped

Serenum Filter Driver
DependOnSvc :
DependOnGrp :
Description : Serenum Filter Driver
Name : serenum
PathName : C:\WINDOWS\system32\DRIVERS\serenum.sys
Started : True
StartMode : Manual
State : Running

Serial port driver
DependOnSvc :
DependOnGrp :
Description : Serial port driver
Name : Serial
PathName : C:\WINDOWS\system32\DRIVERS\serial.sys
Started : True
StartMode : System
State : Running

Sfloppy
DependOnSvc :
DependOnGrp : SCSI miniport
Description : Sfloppy
Name : Sfloppy
PathName : C:\WINDOWS\system32\drivers\Sfloppy.sys
Started : False
StartMode : System
State : Stopped

SiI-3114 SATALink Controller
DependOnSvc :
DependOnGrp :
Description : SiI-3114 SATALink Controller
Name : si3114
PathName : C:\WINDOWS\system32\drivers\si3114.sys
Started : True
StartMode : Boot
State : Running

SATALink driver accelerator
DependOnSvc :
DependOnGrp :
Description : SATALink driver accelerator
Name : SiFilter
PathName : C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys
Started : True
StartMode : Boot
State : Running

Simbad
DependOnSvc :
DependOnGrp :
Description : Simbad
Name : Simbad
PathName :
Started : False
StartMode : Disabled
State : Stopped

SiWinAcc
DependOnSvc :
DependOnGrp :
Description : SiWinAcc
Name : SiWinAcc
PathName : C:\WINDOWS\system32\drivers\SiWinAcc.sys
Started : True
StartMode : Boot
State : Running

Sparrow
DependOnSvc :
DependOnGrp :
Description : Sparrow
Name : Sparrow
PathName :
Started : False
StartMode : Disabled
State : Stopped

Srv
DependOnSvc :
DependOnGrp :
Description : Srv
Name : Srv
PathName : C:\WINDOWS\system32\DRIVERS\srv.sys
Started : True
StartMode : Manual
State : Running

Software Bus Driver
DependOnSvc :
DependOnGrp :
Description : Software Bus Driver
Name : swenum
PathName : C:\WINDOWS\system32\DRIVERS\swenum.sys
Started : True
StartMode : Manual
State : Running

symc810
DependOnSvc :
DependOnGrp :
Description : symc810
Name : symc810
PathName :
Started : False
StartMode : Disabled
State : Stopped

symc8xx
DependOnSvc :
DependOnGrp :
Description : symc8xx
Name : symc8xx
PathName :
Started : False
StartMode : Disabled
State : Stopped

SymEvent
DependOnSvc :
DependOnGrp :
Description : SymEvent
Name : SymEvent
PathName : \??\C:\Program Files\Symantec\SYMEVENT.SYS
Started : True
StartMode : Manual
State : Running

symmpi
DependOnSvc :
DependOnGrp :
Description : symmpi
Name : symmpi
PathName :
Started : False
StartMode : Disabled
State : Stopped

sym_hi
DependOnSvc :
DependOnGrp :
Description : sym_hi
Name : sym_hi
PathName :
Started : False
StartMode : Disabled
State : Stopped

sym_u3
DependOnSvc :
DependOnGrp :
Description : sym_u3
Name : sym_u3
PathName :
Started : False
StartMode : Disabled
State : Stopped

TCP/IP Protocol Driver
DependOnSvc : IPSec
DependOnGrp :
Description : TCP/IP Protocol Driver
Name : Tcpip
PathName : C:\WINDOWS\system32\DRIVERS\tcpip.sys
Started : True
StartMode : System
State : Running

TDPIPE
DependOnSvc :
DependOnGrp :
Description : TDPIPE
Name : TDPIPE
PathName : C:\WINDOWS\system32\drivers\TDPIPE.sys
Started : False
StartMode : Manual
State : Stopped

TDTCP
DependOnSvc :
DependOnGrp :
Description : TDTCP
Name : TDTCP
PathName : C:\WINDOWS\system32\drivers\TDTCP.sys
Started : True
StartMode : Manual
State : Running

Terminal Device Driver
DependOnSvc :
DependOnGrp :
Description : Terminal Device Driver
Name : TermDD
PathName : C:\WINDOWS\system32\DRIVERS\termdd.sys
Started : True
StartMode : System
State : Running

TosIde
DependOnSvc :
DependOnGrp :
Description : TosIde
Name : TosIde
PathName :
Started : False
StartMode : Disabled
State : Stopped

Udfs
DependOnSvc :
DependOnGrp :
Description : Udfs
Name : Udfs
PathName : C:\WINDOWS\system32\drivers\Udfs.sys
Started : False
StartMode : Disabled
State : Stopped

ultra
DependOnSvc :
DependOnGrp :
Description : ultra
Name : ultra
PathName :
Started : False
StartMode : Disabled
State : Stopped

Microcode Update Driver
DependOnSvc :
DependOnGrp :
Description : Microcode Update Driver
Name : Update
PathName : C:\WINDOWS\system32\DRIVERS\update.sys
Started : True
StartMode : Manual
State : Running

USB2 Enabled Hub
DependOnSvc :
DependOnGrp :
Description : USB2 Enabled Hub
Name : usbhub
PathName : C:\WINDOWS\system32\DRIVERS\usbhub.sys
Started : True
StartMode : Manual
State : Running

Microsoft USB Open Host Controller Miniport Driver
DependOnSvc :
DependOnGrp :
Description : Microsoft USB Open Host Controller Miniport Driver
Name : usbohci
PathName : C:\WINDOWS\system32\DRIVERS\usbohci.sys
Started : True
StartMode : Manual
State : Running

USB Mass Storage Driver
DependOnSvc :
DependOnGrp :
Description : USB Mass Storage Driver
Name : usbstor
PathName : C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
Started : True
StartMode : Manual
State : Running

VGA Display Controller.
DependOnSvc :
DependOnGrp :
Description : VGA Display Controller.
Name : VgaSave
PathName : C:\WINDOWS\system32\drivers\vga.sys
Started : True
StartMode : System
State : Running

ViaIde
DependOnSvc :
DependOnGrp :
Description : ViaIde
Name : ViaIde
PathName :
Started : False
StartMode : Disabled
State : Stopped

Storage volumes
DependOnSvc :
DependOnGrp :
Description : Storage volumes
Name : VolSnap
PathName : C:\WINDOWS\system32\DRIVERS\volsnap.sys
Started : True
StartMode : Boot
State : Running

Remote Access IP ARP Driver
DependOnSvc :
DependOnGrp :
Description : Remote Access IP ARP Driver
Name : Wanarp
PathName : C:\WINDOWS\system32\DRIVERS\wanarp.sys
Started : True
StartMode : Manual
State : Running

WDICA
DependOnSvc :
DependOnGrp :
Description : WDICA
Name : WDICA
PathName :
Started : False
StartMode : Manual
State : Stopped

Network Load Balancing
DependOnSvc :
DependOnGrp :
Description : Network Load Balancing
Name : WLBS
PathName : C:\WINDOWS\system32\DRIVERS\wlbs.sys
Started : False
StartMode : Manual
State : Stopped

** Services
Alerter
DependOnSvc : LanmanWorkstation
DependOnGrp :
Description : Notifies selected users and computers of administrative
alerts. If the service is stopped, programs that use administrative alerts
will not receive them. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : Alerter
PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
ProcessId : 0
StartMode : Disabled
StartName : NT AUTHORITY\LocalService
State : Stopped

Application Layer Gateway Service
DependOnSvc :
DependOnGrp :
Description : Provides support for application level protocol plug-ins and
enables network/protocol connectivity. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : ALG
PathName : C:\WINDOWS\System32\alg.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\LocalService
State : Stopped

Application Management
DependOnSvc :
DependOnGrp :
Description : Processes installation, removal, and enumeration requests
for Active Directory IntelliMirror group policy programs. If the service is
disabled, users will be unable to install, remove, or enumerate any
IntelliMirror programs. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : AppMgmt
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

ASP.NET State Service
DependOnSvc :
DependOnGrp :
Description : Provides support for out-of-process session states for
ASP.NET. If this service is stopped, out-of-process requests will not be
processed. If this service is disabled, any services that explicitly depend
on it will fail to start.
Name : aspnet_state
PathName :
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspne t_state.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\NetworkService
State : Stopped

Windows Audio
DependOnSvc : PlugPlay RpcSs
DependOnGrp :
Description : Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function properly. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : AudioSrv
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Background Intelligent Transfer Service
DependOnSvc : Rpcss EventSystem
DependOnGrp :
Description : Transfers data between clients and servers in the
background. If BITS is disabled, features such as Windows Update will not
work correctly.
Name : BITS
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Computer Browser
DependOnSvc : LanmanWorkstation LanmanServer
DependOnGrp :
Description : Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this service is
stopped, this list will not be updated or maintained. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : Browser
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Indexing Service
DependOnSvc : RPCSS
DependOnGrp :
Description : Indexes contents and properties of files on local and remote
computers; provides rapid access to files through flexible querying
language.
Name : CiSvc
PathName : C:\WINDOWS\system32\cisvc.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

ClipBook
DependOnSvc : NetDDE
DependOnGrp :
Description : Enables ClipBook Viewer to store information and share it
with remote computers. If the service is stopped, ClipBook Viewer will not
be able to share information with remote computers. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : ClipSrv
PathName : C:\WINDOWS\system32\clipsrv.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

COM+ System Application
DependOnSvc : rpcss eventsystem
DependOnGrp :
Description : Manages the configuration and tracking of Component Object
Model (COM)+-based components. If the service is stopped, most COM+-based
components will not function properly. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : COMSysApp
PathName : C:\WINDOWS\system32\dllhost.exe
/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
ProcessId : 5284
StartMode : Manual
StartName : LocalSystem
State : Running

Cryptographic Services
DependOnSvc : RpcSs
DependOnGrp :
Description : Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected Root
Service, which adds and removes Trusted Root Certification Authority
certificates from this computer; and Key Service, which helps enroll this
computer for certificates. If this service is stopped, these management
services will not function properly. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : CryptSvc
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Symantec AntiVirus Definition Watcher
DependOnSvc :
DependOnGrp :
Description : Monitors and maintains virus definitions.
Name : DefWatch
PathName : "C:\Program Files\Symantec AntiVirus\DefWatch.exe"
ProcessId : 148
StartMode : Auto
StartName : LocalSystem
State : Running

Distributed File System
DependOnSvc : LanmanWorkstation LanmanServer DfsDriver Mup SamSS
DependOnGrp :
Description : Integrates disparate file shares into a single, logical
namespace and manages these logical volumes distributed across a local or
wide area network. If this service is stopped, users will be unable to
access file shares. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : Dfs
PathName : C:\WINDOWS\system32\Dfssvc.exe
ProcessId : 188
StartMode : Auto
StartName : LocalSystem
State : Running

DHCP Client
DependOnSvc : Tcpip Afd
DependOnGrp :
Description : Registers and updates IP addresses and DNS records for this
computer. If this service is stopped, this computer will not receive dynamic
IP addresses and DNS updates. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : Dhcp
PathName : C:\WINDOWS\system32\svchost.exe -k NetworkService
ProcessId : 1356
StartMode : Auto
StartName : NT AUTHORITY\NetworkService
State : Running

DHCP Server
DependOnSvc : RpcSs Tcpip SamSs EventLog EventSystem
DependOnGrp :
Description : Performs TCP/IP configuration for DHCP clients, including
dynamic assignments of IP addresses, specification of the WINS and DNS
servers, and connection-specific DNS names. If this service is stopped, the
DHCP server will not perform TCP/IP configuration for clients. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Name : DHCPServer
PathName : C:\WINDOWS\system32\tcpsvcs.exe
ProcessId : 3316
StartMode : Auto
StartName : LocalSystem
State : Running

Logical Disk Manager Administrative Service
DependOnSvc : RpcSs PlugPlay DmServer
DependOnGrp :
Description : Configures hard disk drives and volumes. The service only
runs for configuration processes and then stops.
Name : dmadmin
PathName : C:\WINDOWS\System32\dmadmin.exe /com
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Logical Disk Manager
DependOnSvc : RpcSs PlugPlay
DependOnGrp :
Description : Detects and monitors new hard disk drives and sends disk
volume information to Logical Disk Manager Administrative Service for
configuration. If this service is stopped, dynamic disk status and
configuration information may become out of date. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : dmserver
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

DNS Server
DependOnSvc : Tcpip Afd RpcSs
DependOnGrp :
Description : Enables DNS clients to resolve DNS names by answering DNS
queries and dynamic DNS update requests. If this service is stopped, DNS
updates will not occur. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : DNS
PathName : C:\WINDOWS\System32\dns.exe
ProcessId : 256
StartMode : Auto
StartName : LocalSystem
State : Running

DNS Client
DependOnSvc : Tcpip
DependOnGrp :
Description : Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to
resolve DNS names and locate Active Directory domain controllers. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Name : Dnscache
PathName : C:\WINDOWS\system32\svchost.exe -k NetworkService
ProcessId : 1356
StartMode : Auto
StartName : NT AUTHORITY\NetworkService
State : Running

Error Reporting Service
DependOnSvc : RpcSs
DependOnGrp :
Description : Collects, stores, and reports unexpected application crashes
to Microsoft. If this service is stopped, then Error Reporting will occur
only for kernel faults and some types of user mode faults. If this service
is disabled, any services that explicitly depend on it will not start.
Name : ERSvc
PathName : C:\WINDOWS\System32\svchost.exe -k WinErr
ProcessId : 304
StartMode : Auto
StartName : LocalSystem
State : Running

Event Log
DependOnSvc :
DependOnGrp :
Description : Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be stopped.
Name : Eventlog
PathName : C:\WINDOWS\system32\services.exe
ProcessId : 932
StartMode : Auto
StartName : LocalSystem
State : Running

COM+ Event System
DependOnSvc : RPCSS
DependOnGrp :
Description : Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component Object
Model (COM) components. If the service is stopped, SENS will close and will
not be able to provide logon and logoff notifications. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : EventSystem
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Fax
DependOnSvc : TapiSrv RpcSs PlugPlay Spooler
DependOnGrp :
Description : Enables you to send and receive faxes, utilizing fax
resources available on this computer or on the network.
Name : Fax
PathName : C:\WINDOWS\system32\fxssvc.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\NetworkService
State : Stopped

FLEXlm Service 1
DependOnSvc :
DependOnGrp : NetworkProvider
Description :
Name : FLEXlm Service 1
PathName : C:\Program Files\flexlm\v8.3\i86_n3\lmgrd.exe
ProcessId : 464
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Firewall
DependOnSvc : MspFltEx MspNAT isactrl
DependOnGrp :
Description : Provides firewall protection to Firewall and SecureNAT
clients
Name : Fwsrv
PathName : C:\Program Files\Microsoft ISA Server\wspsrv.exe
ProcessId : 6668
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft H.323 Gatekeeper
DependOnSvc :
DependOnGrp :
Description : Supports communications for H.323 Gatekeeper-compliant
applications
Name : GKSVC
PathName : svchost.exe -k iptelsvcs
ProcessId : 496
StartMode : Auto
StartName : LocalSystem
State : Running

Help and Support
DependOnSvc : RPCSS
DependOnGrp :
Description : Enables Help and Support Center to run on this computer. If
this service is stopped, Help and Support Center will be unavailable. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : helpsvc
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Human Interface Device Access
DependOnSvc : RpcSs
DependOnGrp :
Description : Enables generic input access to Human Interface Devices
(HID), which activates and maintains the use of predefined hot buttons on
keyboards, remote controls, and other multimedia devices. If this service is
stopped, hot buttons controlled by this service will no longer function. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : HidServ
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

HTTP SSL
DependOnSvc : HTTP IISADMIN
DependOnGrp :
Description : This service implements the secure hypertext transfer
protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL).
If this service is disabled, any services that explicitly depend on it will
fail to start.
Name : HTTPFilter
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Manual
StartName : LocalSystem
State : Running

IIS Admin Service
DependOnSvc : RPCSS SamSS
DependOnGrp :
Description : Enables this server to administer Web and FTP services. If
this service is stopped, the server will be unable to run Web, FTP, NNTP, or
SMTP sites or configure IIS. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : IISADMIN
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 572
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Exchange IMAP4
DependOnSvc : IISAdmin
DependOnGrp :
Description : Provides Internet Message Access Protocol (IMAP4) Services
to clients. If this service is stopped, clients are unable to connect to
this computer using the IMAP4 protocol.
Name : IMAP4Svc
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

IMAPI CD-Burning COM Service
DependOnSvc :
DependOnGrp :
Description : Manages CD recording using Image Mastering Applications
Programming Interface (IMAPI). If this service is stopped, this computer
will be unable to record CDs. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : ImapiService
PathName : C:\WINDOWS\system32\imapi.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Intel PDS
DependOnSvc :
DependOnGrp :
Description :
Name : Intel PDS
PathName : C:\WINDOWS\system32\CBA\pds.exe
ProcessId : 628
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft ISA Server Control
DependOnSvc : RasMan MspFltEx
DependOnGrp :
Description : Controls ISA Server services
Name : isactrl
PathName : C:\Program Files\Microsoft ISA Server\mspadmin.exe
ProcessId : 392
StartMode : Auto
StartName : LocalSystem
State : Running

Intersite Messaging
DependOnSvc : SamSS
DependOnGrp :
Description : Enables messages to be exchanged between computers running
Windows Server sites. If this service is stopped, messages will not be
exchanged, nor will site routing information be calculated for other
services. If this service is disabled, any services that explicitly depend
on it will fail to start.
Name : IsmServ
PathName : C:\WINDOWS\System32\ismserv.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Kerberos Key Distribution Center
DependOnSvc : RpcSs Afd
DependOnGrp :
Description : On domain controllers this service enables users to log on
to the network using the Kerberos authentication protocol. If this service
is stopped on a domain controller, users will be unable to log on to the
network. If this service is disabled, any services that explicitly depend on
it will fail to start.
Name : kdc
PathName : C:\WINDOWS\System32\lsass.exe
ProcessId : 944
StartMode : Auto
StartName : LocalSystem
State : Running

Server
DependOnSvc :
DependOnGrp :
Description : Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions will
be unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : lanmanserver
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Workstation
DependOnSvc :
DependOnGrp :
Description : Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be unavailable.
If this service is disabled, any services that explicitly depend on it will
fail to start.
Name : lanmanworkstation
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

License Logging
DependOnSvc :
DependOnGrp :
Description : Monitors and records client access licensing for portions of
the operating system (such as IIS, Terminal Server and File/Print) as well
as products that aren't a part of the OS, like SQL and Exchange Server. If
this service is stopped, licensing will be enforced, but will not be
monitored.
Name : LicenseService
PathName : C:\WINDOWS\System32\llssrv.exe
ProcessId : 716
StartMode : Auto
StartName : NT AUTHORITY\NetworkService
State : Running

TCP/IP NetBIOS Helper
DependOnSvc : NetBT Afd
DependOnGrp :
Description : Provides support for the NetBIOS over TCP/IP (NetBT) service
and NetBIOS name resolution for clients on the network, therefore enabling
users to share files, print, and log on to the network. If this service is
stopped, these functions might be unavailable. If this service is disabled,
any services that explicitly depend on it will fail to start.
Name : LmHosts
PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
ProcessId : 1388
StartMode : Auto
StartName : NT AUTHORITY\LocalService
State : Running

Messenger
DependOnSvc : LanmanWorkstation NetBIOS PlugPlay RpcSS
DependOnGrp :
Description : Transmits net send and Alerter service messages between
clients and servers. This service is not related to Windows Messenger. If
this service is stopped, Alerter messages will not be transmitted. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Name : Messenger
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

NetMeeting Remote Desktop Sharing
DependOnSvc :
DependOnGrp :
Description : Enables an authorized user to access this computer remotely
by using NetMeeting over a corporate intranet. If this service is stopped,
remote desktop sharing will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : mnmsrvc
PathName : C:\WINDOWS\system32\mnmsrvc.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Distributed Transaction Coordinator
DependOnSvc : RPCSS SamSS
DependOnGrp :
Description : Coordinates transactions that span multiple resource
managers, such as databases, message queues, and file systems. If this
service is stopped, these transactions will not occur. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : MSDTC
PathName : C:\WINDOWS\system32\msdtc.exe
ProcessId : 1904
StartMode : Auto
StartName : NT AUTHORITY\NetworkService
State : Running

Microsoft Exchange Event
DependOnSvc : MSExchangeIS
DependOnGrp :
Description : Monitors folders and fires events, for Exchange
5.5-compatible server applications.
Name : MSExchangeES
PathName : "C:\Program Files\Exchsrvr\bin\events.exe"
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Microsoft Exchange Information Store
DependOnSvc : EXIFS MSExchangeSA
DependOnGrp :
Description : Manages the Microsoft Exchange Information Store. This
includes mailbox stores and public folder stores. If this service is
stopped, mailbox stores and public folder stores on this computer are
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : MSExchangeIS
PathName : "C:\Program Files\Exchsrvr\bin\store.exe"
ProcessId : 4780
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Exchange Management
DependOnSvc : WinMgmt RPCSS
DependOnGrp :
Description : Provides Exchange management information using Windows
Management Instrumentation (WMI). If this service is stopped, Exchange
management information is unavailable using WMI.
Name : MSExchangeMGMT
PathName : "C:\Program Files\Exchsrvr\bin\exmgmt.exe"
ProcessId : 3384
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Exchange MTA Stacks
DependOnSvc : MSExchangeSA
DependOnGrp :
Description : Provides Microsoft Exchange X.400 services. Exchange X.400
services are used for connecting to Exchange 5.5 servers, and by other
connectors (custom gateways). If this service is stopped, Exchange X.400
services are unavailable.
Name : MSExchangeMTA
PathName : "C:\Program Files\Exchsrvr\bin\emsmta.exe"
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Microsoft Exchange System Attendant
DependOnSvc : EventLog NtLmSsp RPCSS LanmanWorkstation LanmanServer
DependOnGrp :
Description : Provides monitoring, maintenance, and Active Directory
lookup services, for example, monitoring of services and connectors,
defragmenting the Exchange store, and forwarding Active Directory lookups to
a Global Catalog server. If this service is stopped, monitoring,
maintenance, and lookup services are unavailable. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : MSExchangeSA
PathName : "C:\Program Files\Exchsrvr\bin\mad.exe"
ProcessId : 3436
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Exchange Site Replication Service
DependOnSvc :
DependOnGrp :
Description :
Name : MSExchangeSRS
PathName : "C:\Program Files\Exchsrvr\bin\srsmain.exe"
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Windows Installer
DependOnSvc : RpcSs
DependOnGrp :
Description : Adds, modifies, and removes applications provided as a
Windows Installer (*.msi) package. If this service is disabled, any services
that explicitly depend on it will fail to start.
Name : MSIServer
PathName : C:\WINDOWS\system32\msiexec.exe /V
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Microsoft Connector for POP3 Mailboxes
DependOnSvc : MSExchangeIS
DependOnGrp :
Description : Enables Microsoft Exchange Server to retrieve mail from
independent service providers and then have it routed to local mailboxes.
Name : MSPOP3Connector
PathName : C:\Program Files\Microsoft Windows Small Business
Server\Networking\POP3\imbservice.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Microsoft Search
DependOnSvc : RPCSS NTLMSSP
DependOnGrp :
Description : Creates full-text indexes on content and properties of
structured and semi-structured data to allow fast linguistic searches on
this data
Name : MSSEARCH
PathName : "C:\Program Files\Common
Files\System\MSSearch\Bin\mssearch.exe"
ProcessId : 3600
StartMode : Auto
StartName : LocalSystem
State : Running

MSSQL$GTCSQL
DependOnSvc :
DependOnGrp :
Description :
Name : MSSQL$GTCSQL
PathName : C:\PROGRA~1\MICROS~3\MSSQL$~4\binn\sqlservr.exe -sGTCSQL
ProcessId : 324
StartMode : Auto
StartName : LocalSystem
State : Running

MSSQL$SBSMONITORING
DependOnSvc :
DependOnGrp :
Description :
Name : MSSQL$SBSMONITORING
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL$SBSMONITORING\Binn\sqlservr.exe -sSBSMONITORING
ProcessId : 996
StartMode : Auto
StartName : LocalSystem
State : Running

MSSQL$SHAREPOINT
DependOnSvc :
DependOnGrp :
Description :
Name : MSSQL$SHAREPOINT
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL$SHAREPOINT\Binn\sqlservr.exe -sSHAREPOINT
ProcessId : 1344
StartMode : Auto
StartName : LocalSystem
State : Running

MSSQLSERVER
DependOnSvc :
DependOnGrp :
Description :
Name : MSSQLSERVER
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL\Binn\sqlservr.exe -sMSSQLSERVER
ProcessId : 1560
StartMode : Auto
StartName : LocalSystem
State : Running

MSSQLServerADHelper
DependOnSvc :
DependOnGrp :
Description :
Name : MSSQLServerADHelper
PathName : C:\Program Files\Microsoft SQL
Server\80\Tools\Binn\sqladhlp.exe
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Network DDE
DependOnSvc : NetDDEDSDM
DependOnGrp :
Description : Provides network transport and security for Dynamic Data
Exchange (DDE) for programs running on the same computer or on different
computers. If this service is stopped, DDE transport and security will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : NetDDE
PathName : C:\WINDOWS\system32\netdde.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Network DDE DSDM
DependOnSvc :
DependOnGrp :
Description : Manages Dynamic Data Exchange (DDE) network shares. If this
service is stopped, DDE network shares will be unavailable. If this service
is disabled, any services that explicitly depend on it will fail to start.
Name : NetDDEdsdm
PathName : C:\WINDOWS\system32\netdde.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Net Logon
DependOnSvc : LanmanWorkstation LanmanServer
DependOnGrp :
Description : Maintains a secure channel between this computer and the
domain controller for authenticating users and services. If this service is
stopped, the computer may not authenticate users and services and the domain
controller cannot register DNS records. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : Netlogon
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Auto
StartName : LocalSystem
State : Running

Network Connections
DependOnSvc : RpcSs
DependOnGrp :
Description : Manages objects in the Network and Dial-Up Connections
folder, in which you can view both local area network and remote
connections. If this service is disabled, you will not be able to view local
area network and remote connections and any services that explicitly depend
on it will fail to start.
Name : Netman
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Network Location Awareness (NLA)
DependOnSvc : Tcpip Afd
DependOnGrp :
Description : Collects and stores network configuration and location
information, and notifies applications when this information changes.
Name : Nla
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Network News Transfer Protocol (NNTP)
DependOnSvc : IISADMIN Eventlog
DependOnGrp :
Description : Transports network news across the network
Name : NntpSvc
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Symantec System Center Discovery Service
DependOnSvc : RPCSS
DependOnGrp :
Description :
Name : NSCTOP
PathName : C:\PROGRA~1\Symantec\SYMANT~1\NSCTOP.EXE
ProcessId : 1784
StartMode : Auto
StartName : LocalSystem
State : Running

File Replication Service
DependOnSvc : EventLog RpcSs EventSystem
DependOnGrp :
Description : Allows files to be automatically copied and maintained
simultaneously on multiple servers. If this service is stopped, file
replication will not occur and servers will not synchronize. If this service
is disabled, any services that explicitly depend on it will fail to start.
Name : NtFrs
PathName : C:\WINDOWS\system32\ntfrs.exe
ProcessId : 2196
StartMode : Auto
StartName : LocalSystem
State : Running

NT LM Security Support Provider
DependOnSvc :
DependOnGrp :
Description : Provides security to remote procedure call (RPC) programs
that use transports other than named pipes.
Name : NtLmSsp
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Manual
StartName : LocalSystem
State : Running

Removable Storage
DependOnSvc : RpcSs
DependOnGrp :
Description : Manages and catalogs removable media and operates automated
removable media devices. If this service is stopped, programs that are
dependent on Removable Storage, such as Backup and Remote Storage, will
operate more slowly. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : NtmsSvc
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Plug and Play
DependOnSvc :
DependOnGrp :
Description : Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this service
will result in system instability.
Name : PlugPlay
PathName : C:\WINDOWS\system32\services.exe
ProcessId : 932
StartMode : Auto
StartName : LocalSystem
State : Running

IPSEC Services
DependOnSvc : RPCSS Tcpip IPSec
DependOnGrp :
Description : Provides end-to-end security between clients and servers on
TCP/IP networks. If this service is stopped, TCP/IP security between clients
and servers on the network will be impaired. If this service is disabled,
any services that explicitly depend on it will fail to start.
Name : PolicyAgent
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Exchange POP3
DependOnSvc : IISAdmin
DependOnGrp :
Description : Provides Post Office Protocol version 3 (POP3) Services to
clients. If this service is stopped, clients are unable to connect to this
computer using the POP3 protocol.
Name : POP3Svc
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Protected Storage
DependOnSvc : RpcSs
DependOnGrp :
Description : Protects storage of sensitive information, such as private
keys, and prevents access by unauthorized services, processes, or users. If
this service is stopped, protected storage will be unavailable. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Name : ProtectedStorage
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Auto
StartName : LocalSystem
State : Running

Remote Access Auto Connection Manager
DependOnSvc : RasMan Tapisrv
DependOnGrp :
Description : Detects unsuccessful attempts to connect to a remote network
or computer and provides alternative methods for connection. If this service
is stopped, users will need to manually connect. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : RasAuto
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Remote Access Connection Manager
DependOnSvc : Tapisrv
DependOnGrp :
Description : Manages dial-up and virtual private network (VPN)
connections from this computer to the Internet or other remote networks. If
this service is stopped, the operating system might not function properly.
If this service is disabled, any services that explicitly depend on it will
fail to start.
Name : RasMan
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Manual
StartName : LocalSystem
State : Running

Remote Desktop Help Session Manager
DependOnSvc : RPCSS
DependOnGrp :
Description : Manages and controls Remote Assistance. If this service is
stopped, Remote Assistance will be unavailable. Before stopping this
service, see the Dependencies tab of the Properties dialog box.
Name : RDSessMgr
PathName : C:\WINDOWS\system32\sessmgr.exe
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Routing and Remote Access
DependOnSvc : isactrl RpcSS
DependOnGrp : NetBIOSGroup
Description : Enables multi-protocol LAN-to-LAN, LAN-to-WAN, virtual
private network (VPN), and network address translation (NAT) routing
services for clients and servers on this network. If this service is
stopped, these services will be unavailable. If this service is disabled,
any services that explicitly depend on it will fail to start.
Name : RemoteAccess
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Remote Registry
DependOnSvc : RPCSS
DependOnGrp :
Description : Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified only by
users on this computer. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : RemoteRegistry
PathName : C:\WINDOWS\system32\svchost.exe -k regsvc
ProcessId : 2396
StartMode : Auto
StartName : NT AUTHORITY\LocalService
State : Running

Microsoft Exchange Routing Engine
DependOnSvc : IISAdmin
DependOnGrp :
Description : Provides topology and routing information to Exchange Server
2003 servers. If this service is stopped, optimal routing of messages will
not be available.
Name : RESvc
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 572
StartMode : Auto
StartName : LocalSystem
State : Running

Remote Procedure Call (RPC) Locator
DependOnSvc : LanmanWorkstation
DependOnGrp :
Description : Enables remote procedure call (RPC) clients using the RpcNs*
family of APIs to locate RPC servers. If this service is stopped or
disabled, RPC clients using RpcNs* APIs may be unable to locate servers or
fail to start. RpcNs* APIs are not used internally in Windows.
Name : RpcLocator
PathName : C:\WINDOWS\system32\locator.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\NetworkService
State : Stopped

Remote Procedure Call (RPC)
DependOnSvc :
DependOnGrp :
Description : Serves as the endpoint mapper and COM Service Control
Manager. If this service is stopped or disabled, programs using COM or
Remote Procedure Call (RPC) services will not function properly.
Name : RpcSs
PathName : C:\WINDOWS\system32\svchost -k rpcss
ProcessId : 1136
StartMode : Auto
StartName : LocalSystem
State : Running

Resultant Set of Policy Provider
DependOnSvc : RPCSS
DependOnGrp :
Description : Enables a user to connect to a remote computer, access the
Windows Management Instrumentation database for that computer, and either
verify the current Group Policy settings made for the computer or check
settings before they are applied. If this service is stopped, remote
verification will be unavailable. If this service is disabled, any services
that explicitly depend on it will fail to start.
Name : RSoPProv
PathName : C:\WINDOWS\system32\RSoPProv.exe
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Special Administration Console Helper
DependOnSvc :
DependOnGrp :
Description : Allows administrators to remotely access a command prompt
using Emergency Management Services.
Name : sacsvr
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Security Accounts Manager
DependOnSvc : RPCSS
DependOnGrp :
Description : The startup of this service signals other services that the
Security Accounts Manager (SAM) is ready to accept requests. Disabling this
service will prevent other services in the system from being notified when
the SAM is ready, which may in turn cause those services to fail to start
correctly. This service should not be disabled.
Name : SamSs
PathName : C:\WINDOWS\system32\lsass.exe
ProcessId : 944
StartMode : Auto
StartName : LocalSystem
State : Running

SBCore Service
DependOnSvc : Error 5 accessing
SYSTEM\CurrentControlSet\Services\SBCore\DependOnS ervice
DependOnGrp : Error 5 accessing
SYSTEM\CurrentControlSet\Services\SBCore\DependOnG roup
Description : Provides core server services.
Name : SBCore
PathName : C:\WINDOWS\System32\sbscrexe.exe
ProcessId : 2416
StartMode : Auto
StartName : LocalSystem
State : Running

Smart Card
DependOnSvc : PlugPlay
DependOnGrp :
Description : Manages access to smart cards read by this computer. If this
service is stopped, this computer will be unable to read smart cards. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : SCardSvr
PathName : C:\WINDOWS\System32\SCardSvr.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\LocalService
State : Stopped

Task Scheduler
DependOnSvc : RpcSs
DependOnGrp :
Description : Enables a user to configure and schedule automated tasks on
this computer. If this service is stopped, these tasks will not be run at
their scheduled times. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : Schedule
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Seapine License Server
DependOnSvc :
DependOnGrp :
Description :
Name : SeapineLicenseSrv
PathName : C:\Program Files\Seapine\License Server\Seapine License
Server.exe
ProcessId : 2456
StartMode : Auto
StartName : LocalSystem
State : Running

Secondary Logon
DependOnSvc :
DependOnGrp :
Description : Enables starting processes under alternate credentials. If
this service is stopped, this type of logon access will be unavailable. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : seclogon
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

System Event Notification
DependOnSvc : EventSystem
DependOnGrp :
Description : Monitors system events and notifies subscribers to COM+
Event System of these events. If this service is stopped, COM+ Event System
subscribers will not receive system event notifications. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : SENS
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

SentinelLM
DependOnSvc :
DependOnGrp :
Description :
Name : SentinelLM
PathName : D:\Programmer\3dsl\sentlm72018\lservnt.exe
ProcessId : 2760
StartMode : Auto
StartName : LocalSystem
State : Running

Shell Hardware Detection
DependOnSvc : RpcSs
DependOnGrp :
Description : Provides notifications for AutoPlay hardware events.
Name : ShellHWDetection
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Simple Mail Transfer Protocol (SMTP)
DependOnSvc : IISADMIN Eventlog
DependOnGrp :
Description : Transports electronic mail across the network
Name : SMTPSVC
PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
ProcessId : 572
StartMode : Auto
StartName : LocalSystem
State : Running

SPAMfighter
DependOnSvc : MSExchangeIS
DependOnGrp :
Description :
Name : SPAMfighter
PathName : c:\program files\spamfighter\bin\spamfighter.exe
ProcessId : 5544
StartMode : Auto
StartName : LocalSystem
State : Running

Print Spooler
DependOnSvc : RPCSS
DependOnGrp :
Description : Manages all local and network print queues and controls all
printing jobs. If this service is stopped, printing on the local machine
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.
Name : Spooler
PathName : C:\WINDOWS\system32\spoolsv.exe
ProcessId : 1832
StartMode : Auto
StartName : LocalSystem
State : Running

SharePoint Timer Service
DependOnSvc :
DependOnGrp :
Description : Sends notifications and performs scheduled tasks for Windows
SharePoint Services
Name : SPTimer
PathName : C:\Program Files\Common Files\Microsoft Shared\Web Server
Extensions\60\BIN\OWSTIMER.EXE
ProcessId : 2828
StartMode : Auto
StartName : NT AUTHORITY\NETWORK SERVICE
State : Running

SQLAgent$GTCSQL
DependOnSvc : MSSQL$GTCSQL
DependOnGrp :
Description :
Name : SQLAgent$GTCSQL
PathName : C:\PROGRA~1\MICROS~3\MSSQL$~4\binn\sqlagent.exe -i GTCSQL
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

SQLAgent$SBSMONITORING
DependOnSvc : MSSQL$SBSMONITORING
DependOnGrp :
Description :
Name : SQLAgent$SBSMONITORING
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL$SBSMONITORING\Binn\sqlagent.EXE -i SBSMONITORING
ProcessId : 2868
StartMode : Auto
StartName : LocalSystem
State : Running

SQLAgent$SHAREPOINT
DependOnSvc : MSSQL$SHAREPOINT
DependOnGrp :
Description :
Name : SQLAgent$SHAREPOINT
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL$SHAREPOINT\Binn\sqlagent.EXE -i SHAREPOINT
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

SQLSERVERAGENT
DependOnSvc : MSSQLSERVER
DependOnGrp :
Description :
Name : SQLSERVERAGENT
PathName : C:\Program Files\Microsoft SQL
Server\MSSQL\Binn\sqlagent.EXE -i MSSQLSERVER
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Windows Image Acquisition (WIA)
DependOnSvc : RpcSs ShellHWDetection
DependOnGrp :
Description : Provides image acquisition services for scanners and
cameras.
Name : stisvc
PathName : C:\WINDOWS\system32\svchost.exe -k imgsvc
ProcessId : 0
StartMode : Disabled
StartName : NT AUTHORITY\LocalService
State : Stopped

Microsoft Software Shadow Copy Provider
DependOnSvc : RPCSS
DependOnGrp :
Description : Manages software-based volume shadow copies taken by the
Volume Shadow Copy service. If this service is stopped, software-based
volume shadow copies cannot be managed. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name : swprv
PathName : C:\WINDOWS\System32\svchost.exe -k swprv
ProcessId : 3808
StartMode : Manual
StartName : LocalSystem
State : Running

Symantec AntiVirus
DependOnSvc :
DependOnGrp :
Description : Provides real-time virus scanning, reporting, and management
functionality for Symantec AntiVirus.
Name : Symantec AntiVirus
PathName : "C:\Program Files\Symantec AntiVirus\Rtvscan.exe"
ProcessId : 3100
StartMode : Auto
StartName : LocalSystem
State : Running

Performance Logs and Alerts
DependOnSvc :
DependOnGrp :
Description : Collects performance data from local or remote computers
based on preconfigured schedule parameters, then writes the data to a log or
triggers an alert. If this service is stopped, performance information will
not be collected. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : SysmonLog
PathName : C:\WINDOWS\system32\smlogsvc.exe
ProcessId : 0
StartMode : Manual
StartName : NT Authority\NetworkService
State : Stopped

Telephony
DependOnSvc : PlugPlay RpcSs
DependOnGrp :
Description : Provides Telephony API (TAPI) support for clients using
programs that control telephony devices and IP-based voice connections. If
this service is stopped, the function of all dependent programs will be
impaired. If this service is disabled, any services that explicitly depend
on it will fail to start.
Name : TapiSrv
PathName : C:\WINDOWS\System32\svchost.exe -k tapisrv
ProcessId : 3116
StartMode : Manual
StartName : LocalSystem
State : Running

Terminal Services
DependOnSvc : RPCSS
DependOnGrp :
Description : Allows users to connect interactively to a remote computer.
Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server
depend on this service - stopping or disabling this service may make your
computer unreliable. To prevent remote use of this computer, clear the
checkboxes on the Remote tab of the System properties control panel item.
Name : TermService
PathName : C:\WINDOWS\System32\svchost.exe -k termsvcs
ProcessId : 1192
StartMode : Manual
StartName : LocalSystem
State : Running

TestTrack Pro Server
DependOnSvc :
DependOnGrp :
Description :
Name : TestTrackSrv
PathName : C:\Program Files\Seapine\TestTrack Pro\TestTrack Pro
Server.exe
ProcessId : 3196
StartMode : Auto
StartName : LocalSystem
State : Running

Themes
DependOnSvc :
DependOnGrp :
Description : Provides user experience theme management.
Name : Themes
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Telnet
DependOnSvc : RPCSS TCPIP NTLMSSP
DependOnGrp :
Description : Enables a remote user to log on to this computer and run
programs, and supports various TCP/IP Telnet clients, including UNIX-based
and Windows-based computers. If this service is stopped, remote user access
to programs might be unavailable. If this service is disabled, any services
that explicitly depend on it will fail to start.
Name : TlntSvr
PathName : C:\WINDOWS\system32\tlntsvr.exe
ProcessId : 0
StartMode : Disabled
StartName : NT AUTHORITY\LocalService
State : Stopped

Distributed Link Tracking Server
DependOnSvc : RpcSs
DependOnGrp :
Description : Enables the Distributed Link Tracking Client service within
the same domain to provide more reliable and efficient maintenance of links
within the domain. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : TrkSvr
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Distributed Link Tracking Client
DependOnSvc : RpcSs
DependOnGrp :
Description : Enables client programs to track linked files that are moved
within an NTFS volume, to another NTFS volume on the same computer, or to an
NTFS volume on another computer. If this service is stopped, the links on
this computer will not be maintained or tracked. If this service is
disabled, any services that explicitly depend on it will fail to start.
Name : TrkWks
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Terminal Services Session Directory
DependOnSvc : RPCSS
DependOnGrp :
Description : Enables a user connection request to be routed to the
appropriate terminal server in a cluster. If this service is stopped,
connection requests will be routed to the first available server.
Name : Tssdis
PathName : C:\WINDOWS\System32\tssdis.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Upload Manager
DependOnSvc : RPCSS
DependOnGrp :
Description : Manages the synchronous and asynchronous file transfers
between clients and servers on the network. Driver data is anonymously
uploaded from these transfers and then used by Microsoft to help users find
the drivers they need. The Driver Feedback Server asks the client's
permission to upload the computer's hardware profile and then search the
Internet for information about how to obtain the appropriate driver or get
support. If this service stops, Microsoft will not have access to the driver
data.
Name : uploadmgr
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Uninterruptible Power Supply
DependOnSvc :
DependOnGrp :
Description : Manages an uninterruptible power supply (UPS) connected to
the computer.
Name : UPS
PathName : C:\WINDOWS\System32\ups.exe
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\LocalService
State : Stopped

Virtual Disk Service
DependOnSvc : RpcSs PlugPlay
DependOnGrp :
Description : Provides software volume and hardware volume management
service.
Name : vds
PathName : C:\WINDOWS\System32\vds.exe
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Volume Shadow Copy
DependOnSvc : RPCSS
DependOnGrp :
Description : Manages and implements Volume Shadow Copies used for backup
and other purposes. If this service is stopped, shadow copies will be
unavailable for backup and the backup may fail. If this service is disabled,
any services that explicitly depend on it will fail to start.
Name : VSS
PathName : C:\WINDOWS\System32\vssvc.exe
ProcessId : 5368
StartMode : Manual
StartName : LocalSystem
State : Running

Windows Time
DependOnSvc :
DependOnGrp :
Description : Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Name : W32Time
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Web Proxy
DependOnSvc : MspFltEx isactrl
DependOnGrp :
Description : Provides web connectivity to Web Proxy clients
Name : W3Proxy
PathName : C:\Program Files\Microsoft ISA Server\w3proxy.exe
ProcessId : 6172
StartMode : Auto
StartName : LocalSystem
State : Running

Microsoft Scheduled Cache Content Download
DependOnSvc : isactrl
DependOnGrp :
Description : Downloads cache content from Web servers based on specified
scheduled jobs
Name : w3schdwn
PathName : C:\Program Files\Microsoft ISA Server\W3Prefch.exe
ProcessId : 4120
StartMode : Auto
StartName : LocalSystem
State : Running

World Wide Web Publishing Service
DependOnSvc : RPCSS HTTPFilter IISADMIN
DependOnGrp :
Description : Provides Web connectivity and administration through the
Internet Information Services Manager
Name : W3SVC
PathName : C:\WINDOWS\System32\svchost.exe -k iissvcs
ProcessId : 5836
StartMode : Auto
StartName : LocalSystem
State : Running

Web Usage Logging Service
DependOnSvc : RemoteAccess
DependOnGrp :
Description : Logs client Web activity for the Small Business Server usage
report.
Name : WBLOGSVC
PathName : C:\Program Files\Microsoft Windows Small Business
Server\monitoring\WbLogSvc.exe
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

WebClient
DependOnSvc : MRxDAV
DependOnGrp :
Description : Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions will not
be available. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : WebClient
PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
ProcessId : 1388
StartMode : Auto
StartName : NT AUTHORITY\LocalService
State : Running

WinHTTP Web Proxy Auto-Discovery Service
DependOnSvc : Dhcp
DependOnGrp :
Description : Implements the Web Proxy Auto-Discovery (WPAD) protocol for
Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client
to automatically discover a proxy configuration. If this service is stopped
or disabled, the WPAD protocol will be executed within the HTTP client's
process instead of an external service process; there would be no loss of
functionality as a result.
Name : WinHttpAutoProxySvc
PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
ProcessId : 0
StartMode : Manual
StartName : NT AUTHORITY\LocalService
State : Stopped

Windows Management Instrumentation
DependOnSvc : RPCSS Eventlog
DependOnGrp :
Description : Provides a common interface and object model to access
management information about operating system, devices, applications and
services. If this service is stopped, most Windows-based software will not
function properly. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : winmgmt
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Windows Internet Name Service (WINS)
DependOnSvc : RPCSS NTLMSSP SAMSS EventLog EventSystem
DependOnGrp :
Description : Resolves NetBIOS names for TCP/IP clients by locating
network services that use NetBIOS names. If this service is stopped, network
NetBIOS services will not function properly. If this service is disabled,
any services that explicitly depend on it will fail to start.
Name : WINS
PathName : C:\WINDOWS\System32\wins.exe
ProcessId : 3288
StartMode : Auto
StartName : LocalSystem
State : Running

Portable Media Serial Number Service
DependOnSvc :
DependOnGrp :
Description : Retrieves the serial number of any portable media player
connected to this computer. If this service is stopped, protected content
might not be down loaded to the device.
Name : WmdmPmSN
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Disabled
StartName : LocalSystem
State : Stopped

Windows Management Instrumentation Driver Extensions
DependOnSvc :
DependOnGrp :
Description : Monitors all drivers and event trace providers that are
configured to publish Windows Management Instrumentation (WMI) or event
trace information. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name : Wmi
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

WMI Performance Adapter
DependOnSvc : RPCSS
DependOnGrp :
Description : Provides performance library information from Windows
Management Instrumentation (WMI) providers to clients on the network. This
service only runs when Performance Data Helper is activated.
Name : WmiApSrv
PathName : C:\WINDOWS\system32\wbem\wmiapsrv.exe
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

Automatic Updates
DependOnSvc :
DependOnGrp :
Description : Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be manually
updated at the Windows Update Web site.
Name : wuauserv
PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
ProcessId : 1472
StartMode : Auto
StartName : LocalSystem
State : Running

Wireless Configuration
DependOnSvc : RpcSs Ndisuio
DependOnGrp :
Description : Enables automatic configuration for IEEE 802.11 adapters. If
this service is stopped, automatic configuration will be unavailable. If
this service is disabled, any services that explicitly depend on it will
fail to start.
Name : WZCSVC
PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
ProcessId : 0
StartMode : Manual
StartName : LocalSystem
State : Stopped

************************************************** **************
DRIVE INFORMATION
************************************************** **************
Total Current Cache Size ( MB ) : 500
Total Disk Size ( MB ) : 542451
Total Free Space ( MB ) : 183161

C:
Files System : NTFS
Current Cache ( MB ) : 500
Disk Size ( MB ) : 70896
Disk Free Space ( MB ) : 26444

D:
Files System : NTFS
Current Cache ( MB ) : 0
Disk Size ( MB ) : 70904
Disk Free Space ( MB ) : 1869

E:
Files System : NTFS
Current Cache ( MB ) : 0
Disk Size ( MB ) : 114470
Disk Free Space ( MB ) : 58464

F:
Files System : NTFS
Current Cache ( MB ) : 0
Disk Size ( MB ) : 286181
Disk Free Space ( MB ) : 96384

************************************************** **************
ISA FILES DATA
************************************************** **************
** C:\Program Files\Microsoft ISA Server\
60 file(s) found.
alertreg.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 25360
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

bwcapi.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 11536
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

bwcmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 50448
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

bwcpmon.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 8976
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

bwserver.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 30992
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

cachmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 6928
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

dailysum.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 11024
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

fltrsnk1.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 60688
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

ftpfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 19216
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

gkadm.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 239376
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

gkif.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 32016
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

gksvc.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 140560
Manufacturer : Microsoft Corporation
Version : 3.0.1200.285

h323asn1.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 209168
Manufacturer : Microsoft Corporation
Version : 3.0.1200.285

h323fltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 85776
Manufacturer : Microsoft Corporation
Version : 3.0.1200.285

h323snap.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 47888
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

hfmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 6928
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

hfperf.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 5904
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

httpadm.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 36112
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

httpfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 51472
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

issdnsad.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 43792
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

issfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 77072
Manufacturer : Microsoft Corporation
Version : 3.0.1200.256

latui.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 58128
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

msfpc.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 209680
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

msfpccom.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 1821968
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

msfpcsch.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 38160
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

msfpcsnp.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 2570000
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

msfpcui.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 2615568
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

msowc.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 3080237
Manufacturer : Microsoft Corporation
Version : 9.0.0.2710

mspadmin.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 178448
Manufacturer : Microsoft Corporation
Version : 3.0.1200.257

mspapi.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 33040
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

msphlpr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 101136
Manufacturer : Microsoft Corporation
Version : 3.0.1200.257

mspmon.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 16656
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

mspmsg.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 197392
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

mspsec.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 15632
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

pfmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 6416
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

prxatq.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 68368
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

repgen.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 16656
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

repsnap.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 200976
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

rpcfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 43280
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

smtpcred.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 17680
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

smtpfadm.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 205072
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

smtpfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 92432
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

socksadm.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 37136
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

socksflt.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 34064
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

socksprf.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 6416
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

strmadmn.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 70416
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

strmfltr.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 62736
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

sumgen.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 789264
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

vps2.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 34576
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

w3papi.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 8464
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

w3pinet.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 30992
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

w3pmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 8976
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

w3prefch.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 34064
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

w3proxy.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 391440
Manufacturer : Microsoft Corporation
Version : 3.0.1200.257

wspadmin.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 21264
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspapi.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 7952
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspfwps.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 19216
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspmib.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 7952
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspperf.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 6928
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

wspsrv.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 298768
Manufacturer : Microsoft Corporation
Version : 3.0.1200.257


** C:\Program Files\Microsoft ISA Server\$UNINSTALL_ISA_SP$\
3 file(s) found.
hotfix.exe
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 70928
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

hotfix_res.dll
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 34576
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

hotfix_utl.dll
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 5904
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290


** C:\Program Files\Microsoft ISA Server\$UNINSTALL_ISA_SP$\SP_1\
3 file(s) found.
hotfix.exe
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 70928
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

hotfix_res.dll
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 34576
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290

hotfix_utl.dll
Attributes : ReadOnly
Compressed : False
Encrypted : False
FileSize : 5904
Manufacturer : Microsoft Corporation
Version : 3.0.1200.290


** C:\Program Files\Microsoft ISA Server\Clients\
5 file(s) found.
instmsia.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 1489152
Manufacturer : Microsoft Corporation
Version : 5.0.810.500

instmsiw.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 1499904
Manufacturer : Microsoft Corporation
Version : 5.0.810.500

setup.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 86016
Manufacturer : Installshield Software Corporation
Version : 1.51.129.0

setup_a.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 36352
Manufacturer : Microsoft Corporatio
Version : 3.0.1200.50

stpwrapp.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 25100
Manufacturer :
Version :


** C:\Program Files\Microsoft ISA Server\Clients\i386\
16 file(s) found.
acmsetup.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 352768
Manufacturer : Microsoft Corporation
Version : 3.1.0.1811

aux16.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 30936
Manufacturer :
Version :

aux32_16.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 31232
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

chkwsp32.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 49936
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

credtool.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 7440
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

isatray.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 52496
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

mspcutil.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 5904
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

mssetup.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 264704
Manufacturer : Microsoft Corporation
Version : 3.1.0.1811

rws32.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 171792
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

sporder.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 8464
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

stpext32.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 135952
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

uninst.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 34576
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspcpl32.cpl
Attributes : None
Compressed : False
Encrypted : False
FileSize : 160528
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166

wspntlm.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 33040
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wsprefr.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 29968
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50

wspwsp.dll
Attributes : None
Compressed : False
Encrypted : False
FileSize : 97552
Manufacturer : Microsoft Corporation
Version : 3.0.1200.265


** C:\Program Files\Microsoft ISA Server\SetupBin\
2 file(s) found.
setup.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 36352
Manufacturer : Microsoft Corporatio
Version : 3.0.1200.50

uninst.exe
Attributes : None
Compressed : False
Encrypted : False
FileSize : 34576
Manufacturer : Microsoft Corporation
Version : 3.0.1200.50


** C:\WINDOWS\system32\drivers\
2 file(s) found.
mspfltex.sys
Attributes : None
Compressed : False
Encrypted : False
FileSize : 41296
Manufacturer : Microsoft Corporation
Version : 3.0.1200.255

mspnat.sys
Attributes : None
Compressed : False
Encrypted : False
FileSize : 24656
Manufacturer : Microsoft Corporation
Version : 3.0.1200.166


************************************************** **************
GATEKEEPER CONFIGURATION
************************************************** **************

DESTINATIONS
============


PHONE NUMBER RULES
==================

Name : Local
Enabled : True
Description : All aliases are resolved using the local registration
database
Prefix or Phone Number :
Route all phone numbers using this prefix : True
Metric : 1
Destination Type : Registration Database

EMAIL ADDRESS RULES
===================
Name : Local
Enabled : True
Description : All aliases are resolved using the local registration
database
DNS Domain Name :
Route all e-mail addresses using this DNS Domain Name : True
Metric : 1
Destination Type : Registration Database


IP ADDRESS RULES
================

Name : Class A
Enabled : True
Description : No address translation is performed
IP Address : 0.0.0.0/1
Metric : 1
Destination Type : Local Network

Name : Class B
Enabled : True
Description : No address translation is performed
IP Address : 128.0.0.0/2
Metric : 1
Destination Type : Local Network

Name : Class C
Enabled : True
Description : No address translation is performed
IP Address : 192.0.0.0/3
Metric : 1
Destination Type : Local Network

************************************************** **************
URLSCAN.INI
************************************************** **************
URLScan.ini was not found on this server.

************************************************** **************
IPCONFIG/ALL
************************************************** **************
Windows IP Configuration

Host Name . . . . . . . . . . . . : gtcsbs03
Primary Dns Suffix . . . . . . . : GTC.local
IP Routing Enabled . . . . . . . : via IP Packet Filtering setting
WINS Proxy Enabled . . . . . . . : False
DNS Devolution Enabled. . . . . . : True

Server Local Area Connection
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
#2 - Packet Scheduler Miniport
Physical Address. . . . . . . . . : 00:E0:81:2E:53:09
DHCP Enabled. . . . . . . . . . . : False
Autoconfiguration Enabled . . . . : True
Subnet Mask . . . . . . . . . . . : 255.0.0.0
IP Address . . . . . . . . . . . : 10.0.0.3
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.3
Primary WINS Server . . . . . . . : 10.0.0.3
NetBIOS over TCP/IP . . . . . . . : Enabled
DNS Domain Suffix Search Order . :

WAN
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet -
Packet Scheduler Miniport
Physical Address. . . . . . . . . : 00:E0:81:2E:53:08
DHCP Enabled. . . . . . . . . . . : False
Autoconfiguration Enabled . . . . : True
Subnet Mask . . . . . . . . . . . : 255.255.252.0
IP Address . . . . . . . . . . . : 68.145.104.177
Default Gateway . . . . . . . . . : 68.145.104.1
DNS Servers . . . . . . . . . . . : 10.0.0.3
Primary WINS Server . . . . . . . : 10.0.0.3
NetBIOS over TCP/IP . . . . . . . : Disabled
DNS Domain Suffix Search Order . :


************************************************** **************
Running "NETSTAT -R"
************************************************** **************

IPv4 Route Table
================================================== =========================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 e0 81 2e 53 08 ...... Broadcom NetXtreme Gigabit Ethernet - Packet
Scheduler Miniport
0x10003 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
0x10004 ...00 e0 81 2e 53 09 ...... Broadcom NetXtreme Gigabit Ethernet #2 -
Packet Scheduler Miniport
================================================== =========================
================================================== =========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 68.145.104.1 68.145.104.177 1
10.0.0.0 255.0.0.0 10.0.0.3 10.0.0.3 10
10.0.0.3 255.255.255.255 127.0.0.1 127.0.0.1 10
10.0.0.22 255.255.255.255 127.0.0.1 127.0.0.1 50
10.255.255.255 255.255.255.255 10.0.0.3 10.0.0.3 10
68.145.104.0 255.255.252.0 68.145.104.177 68.145.104.177 20
68.145.104.177 255.255.255.255 127.0.0.1 127.0.0.1 20
68.255.255.255 255.255.255.255 68.145.104.177 68.145.104.177 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 240.0.0.0 10.0.0.3 10.0.0.3 10
224.0.0.0 240.0.0.0 68.145.104.177 68.145.104.177 20
255.255.255.255 255.255.255.255 10.0.0.3 10.0.0.3 1
255.255.255.255 255.255.255.255 68.145.104.177 68.145.104.177 1
Default Gateway: 68.145.104.1
================================================== =========================
Persistent Routes:
None

************************************************** **************
Running "NETSH SHOW HELPER"
************************************************** **************
Helper GUID DLL Filename Command
-------------------------------------- ------------ -------
{1D0FA29B-E93E-11D2-A91E-009027450464} AAAAMON.DLL aaaa
{00770721-44EA-11D5-93BA-00B0D022DD1F} HNETMON.DLL bridge
{0F7412F0-80FC-11D2-BE57-00C04FC3357A} DHCPMON.DLL dhcp
{CC41B21B-8040-4BB0-AC2A-820623160940} DGNET.DLL diag
{0705ECA1-7AAC-11D2-89DC-006008B0E5B9} IFMON.DLL interface
{89D00931-1E00-11D3-8738-00600837C775} IFMON.DLL ip
{05BB0FE9-8D89-48DE-B7BB-9F138B2E950C} IPV6MON.DLL ipv6
{F1EFA7E5-7169-4EC0-A63A-9B22A743E19C} IPV6MON.DLL 6to4
{F1EFA7E5-7169-4EC0-A63A-9B22A743E19C} IPV6MON.DLL isatap
{86A3A33F-4D51-47FF-B24C-8E9B13CEB3A2} IPV6MON.DLL portproxy
{F7E0BC27-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL ipsec
{F7E0BC29-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL dynamic
{F7E0BC28-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL static
{0705ECA2-7AAC-11D2-89DC-006008B0E5B9} RASMONTR.DLL ras
{42E3CC21-098C-11D3-8C4D-00104BCA495B} RASMONTR.DLL aaaa
{E0C5D007-D34C-11D2-9B76-00104BCA495B} RASMONTR.DLL appletalk
{90FE6CFC-B6A2-463B-AA12-25E615EC3C66} RASMONTR.DLL diagnostics
{13D12A78-D0FB-11D2-9B76-00104BCA495B} RASMONTR.DLL ip
{6FB90155-D324-11D2-9B76-00104BCA495B} RASMONTR.DLL ipx
{69F21BC3-D349-11D2-9B76-00104BCA495B} RASMONTR.DLL netbeui
{65EC23C0-D1B9-11D2-89E4-006008B0E5B9} IPMONTR.DLL routing
{0705ECA0-7AAC-11D2-89DC-006008B0E5B9} IPMONTR.DLL ip
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL autodhcp
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL dnsproxy
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL igmp
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL nat
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL ospf
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL relay
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL rip
{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL routerdiscovery
{592852F7-5F6F-470B-9097-C5D33B612975} RPCNSH.DLL rpc
{BF563723-9065-11D2-BE87-00C04FC3357A} WINSMON.DLL wins


************************************************** **************
Running "WLBS DISPLAY"
************************************************** **************
WLBS Cluster Control Utility V2.4 (c) 1997-2003 Microsoft Corporation.

WLBS is not installed on this system or you do not have

sufficient privileges to administer the cluster.


************************************************** **************
Running "NETSH ROUTING IP SHOW INTERFACE"
************************************************** **************
State Type Interface
---------- ----------- ---------------------------------------------
Enabled Dedicated WAN
Enabled Dedicated Server Local Area Connection
Enabled Internal Internal
Enabled Loop Back Loopback


************************************************** **************
Running "NETSH ROUTING IP SHOW PERSISTENTROUTES"
************************************************** **************
Persistent routes, according to stored configuration:
No entries were found.


************************************************** **************
Running "NETSH ROUTING IP SHOW RTMDESTINATIONS"
************************************************** **************

Prefix Protocol Prf Met Gateway Vw Interface
------------------ ---------- --- --- --------------- -- ----------------
0.0.0.0/0 NetMgmt 10 1 68.145.104.1 UM WAN
10.0.0.0/8 Local 1 10 10.0.0.3 UM Server Local
Area Connection
10.0.0.3/32 Local 1 10 127.0.0.1 U Loopback
10.0.0.22/32 Local 1 50 127.0.0.1 U Loopback
10.255.255.255/32 Local 1 10 10.0.0.3 UM Server Local
Area Connection
68.145.104.0/22 Local 1 20 68.145.104.177 UM WAN
68.145.104.177/32 Local 1 20 127.0.0.1 U Loopback
68.255.255.255/32 Local 1 20 68.145.104.177 UM WAN
127.0.0.0/8 Local 1 1 127.0.0.1 U Loopback
127.0.0.1/32 Local 1 1 127.0.0.1 U Loopback
224.0.0.0/4 Local 1 10 10.0.0.3 UM Server Local
Area Connection
255.255.255.255/32 Local 1 1 10.0.0.3 UM Server Local
Area Connection


************************************************** **************
Running "NETSH ROUTING IP SHOW RTMROUTES"
************************************************** **************

Prefix Protocol Prf Met Gateway Vw Interface
------------------ ---------- --- --- --------------- -- ----------------
0.0.0.0/0 NetMgmt 10 1 68.145.104.1 UM WAN
10.0.0.0/8 Local 1 10 10.0.0.3 UM Server Local
Area Connection
10.0.0.3/32 Local 1 10 127.0.0.1 U Loopback
10.0.0.22/32 Local 1 50 127.0.0.1 U Loopback
10.255.255.255/32 Local 1 10 10.0.0.3 UM Server Local
Area Connection
68.145.104.0/22 Local 1 20 68.145.104.177 UM WAN
68.145.104.177/32 Local 1 20 127.0.0.1 U Loopback
68.255.255.255/32 Local 1 20 68.145.104.177 UM WAN
127.0.0.0/8 Local 1 1 127.0.0.1 U Loopback
127.0.0.1/32 Local 1 1 127.0.0.1 U Loopback
224.0.0.0/4 Local 1 10 10.0.0.3 UM Server Local
Area Connection
224.0.0.0/4 Local 1 20 68.145.104.177 UM WAN
255.255.255.255/32 Local 1 1 10.0.0.3 UM Server Local
Area Connection
255.255.255.255/32 Local 1 1 68.145.104.177 UM WAN


************************************************** **************
Running "NETSH ROUTING IP RELAY SHOW GLOBAL"
************************************************** **************
DHCP Relay Agent must be installed first.


************************************************** **************
Running "NETSH ROUTING IP RELAY SHOW IFCONFIG"
************************************************** **************
DHCP Relay Agent must be installed first.


************************************************** **************
Running "NETSTAT -ANO"
************************************************** **************

Active Connections

Proto Local Address Foreign Address State PID
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:42 0.0.0.0:0 LISTENING 3288
TCP 0.0.0.0:88 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:99 0.0.0.0:0 LISTENING 3196
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 1136
TCP 0.0.0.0:389 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:464 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:593 0.0.0.0:0 LISTENING 1136
TCP 0.0.0.0:636 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:691 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:1024 0.0.0.0:0 LISTENING 4764
TCP 0.0.0.0:1433 0.0.0.0:0 LISTENING 1560
TCP 0.0.0.0:1723 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:2410 0.0.0.0:0 LISTENING 5544
TCP 0.0.0.0:2412 0.0.0.0:0 LISTENING 5544
TCP 0.0.0.0:3004 0.0.0.0:0 LISTENING 392
TCP 0.0.0.0:3088 0.0.0.0:0 LISTENING 4780
TCP 0.0.0.0:3115 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:3268 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:3269 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING 1192
TCP 0.0.0.0:5100 0.0.0.0:0 LISTENING 2456
TCP 0.0.0.0:6001 0.0.0.0:0 LISTENING 4780
TCP 0.0.0.0:6002 0.0.0.0:0 LISTENING 3436
TCP 0.0.0.0:6004 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:27000 0.0.0.0:0 LISTENING 464
TCP 0.0.0.0:29034 0.0.0.0:0 LISTENING 324
TCP 0.0.0.0:52892 0.0.0.0:0 LISTENING 6668
TCP 0.0.0.0:52899 0.0.0.0:0 LISTENING 6172
TCP 0.0.0.0:65379 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:65380 0.0.0.0:0 LISTENING 1472
TCP 0.0.0.0:65382 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:65435 0.0.0.0:0 LISTENING 256
TCP 0.0.0.0:65439 0.0.0.0:0 LISTENING 808
TCP 0.0.0.0:65457 0.0.0.0:0 LISTENING 2196
TCP 0.0.0.0:65469 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:65472 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:65479 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:65480 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:65491 0.0.0.0:0 LISTENING 3288
TCP 0.0.0.0:65492 0.0.0.0:0 LISTENING 3436
TCP 0.0.0.0:65527 0.0.0.0:0 LISTENING 3316
TCP 10.0.0.3:53 0.0.0.0:0 LISTENING 256
TCP 10.0.0.3:80 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:80 10.0.0.3:32061 ESTABLISHED 4
TCP 10.0.0.3:80 10.0.0.3:32192 ESTABLISHED 4
TCP 10.0.0.3:80 10.0.0.34:3866 ESTABLISHED 4
TCP 10.0.0.3:135 10.0.0.3:32179 ESTABLISHED 1136
TCP 10.0.0.3:135 10.0.0.3:32205 ESTABLISHED 1136
TCP 10.0.0.3:139 0.0.0.0:0 LISTENING 4
TCP 10.0.0.3:389 10.0.0.3:30501 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30544 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30545 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30546 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30553 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30556 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30557 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30558 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30559 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30560 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30561 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30562 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30579 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30580 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30581 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30582 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30583 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30584 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30589 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:30629 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:31645 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:31881 ESTABLISHED 944
TCP 10.0.0.3:389 10.0.0.3:32195 TIME_WAIT 0
TCP 10.0.0.3:389 10.0.0.3:32196 TIME_WAIT 0
TCP 10.0.0.3:389 10.0.0.3:32198 TIME_WAIT 0
TCP 10.0.0.3:389 10.0.0.3:32199 TIME_WAIT 0
TCP 10.0.0.3:389 10.0.0.3:32259 TIME_WAIT 0
TCP 10.0.0.3:389 10.0.0.3:32260 TIME_WAIT 0
TCP 10.0.0.3:443 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:444 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:445 10.0.0.3:32176 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.11:4158 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.20:2408 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.24:4077 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.32:1255 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.43:1493 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.83:1200 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.97:2718 ESTABLISHED 4
TCP 10.0.0.3:445 10.0.0.97:3669 ESTABLISHED 4
TCP 10.0.0.3:691 10.0.0.3:53074 ESTABLISHED 572
TCP 10.0.0.3:691 10.0.0.3:53347 ESTABLISHED 572
TCP 10.0.0.3:691 10.0.0.3:53348 ESTABLISHED 572
TCP 10.0.0.3:1080 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:1745 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:2404 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:3088 10.0.0.43:4116 ESTABLISHED 4780
TCP 10.0.0.3:3088 10.0.0.83:1151 ESTABLISHED 4780
TCP 10.0.0.3:3097 10.0.0.3:65379 ESTABLISHED 3436
TCP 10.0.0.3:3268 10.0.0.3:30547 ESTABLISHED 944
TCP 10.0.0.3:3268 10.0.0.3:30552 ESTABLISHED 944
TCP 10.0.0.3:3268 10.0.0.3:30569 ESTABLISHED 944
TCP 10.0.0.3:3268 10.0.0.3:30573 ESTABLISHED 944
TCP 10.0.0.3:3268 10.0.0.3:30574 ESTABLISHED 944
TCP 10.0.0.3:3455 10.0.0.3:389 CLOSE_WAIT 1472
TCP 10.0.0.3:4251 10.0.0.3:65379 ESTABLISHED 944
TCP 10.0.0.3:6897 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:8080 0.0.0.0:0 LISTENING 6172
TCP 10.0.0.3:8081 0.0.0.0:0 LISTENING 5836
TCP 10.0.0.3:8443 0.0.0.0:0 LISTENING 6172
TCP 10.0.0.3:10097 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10098 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10099 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10100 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10101 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10102 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10103 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10104 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10105 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10106 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10107 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10108 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10109 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10110 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10111 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10112 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10113 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10114 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10115 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10116 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10117 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10118 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10119 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10120 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10121 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10122 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10123 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10124 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10125 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10126 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10127 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10128 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10129 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10130 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10131 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10132 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10133 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10134 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10135 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10136 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10137 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10138 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10139 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10140 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10141 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10142 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10143 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10144 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10145 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10146 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10147 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10148 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10149 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10150 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10151 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10152 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10153 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10154 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10155 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10156 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10157 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10158 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10159 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10160 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10161 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10162 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10163 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10164 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10165 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10166 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10167 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10168 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10169 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10170 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10171 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10172 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10173 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10174 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10175 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10176 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10177 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10178 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10179 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10180 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10181 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10182 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10183 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10184 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10185 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10186 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10187 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10188 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10189 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10190 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10191 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10192 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10193 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10194 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10195 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10196 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10197 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10198 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10199 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10200 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10201 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10202 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10203 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10204 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10205 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10206 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10207 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:10208 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.3:23539 10.0.0.3:389 CLOSE_WAIT 4780
TCP 10.0.0.3:25851 10.0.0.3:389 CLOSE_WAIT 7592
TCP 10.0.0.3:27451 10.0.0.3:389 CLOSE_WAIT 1424
TCP 10.0.0.3:27733 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.3:30501 10.0.0.3:389 ESTABLISHED 4780
TCP 10.0.0.3:30544 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30545 10.0.0.3:389 ESTABLISHED 572
TCP 10.0.0.3:30546 10.0.0.3:389 ESTABLISHED 2592
TCP 10.0.0.3:30547 10.0.0.3:3268 ESTABLISHED 3436
TCP 10.0.0.3:30552 10.0.0.3:3268 ESTABLISHED 2592
TCP 10.0.0.3:30553 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30556 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30557 10.0.0.3:389 ESTABLISHED 572
TCP 10.0.0.3:30558 10.0.0.3:389 ESTABLISHED 4780
TCP 10.0.0.3:30559 10.0.0.3:389 ESTABLISHED 4780
TCP 10.0.0.3:30560 10.0.0.3:389 ESTABLISHED 572
TCP 10.0.0.3:30561 10.0.0.3:389 ESTABLISHED 572
TCP 10.0.0.3:30562 10.0.0.3:389 ESTABLISHED 572
TCP 10.0.0.3:30563 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.3:30569 10.0.0.3:3268 ESTABLISHED 572
TCP 10.0.0.3:30573 10.0.0.3:3268 ESTABLISHED 572
TCP 10.0.0.3:30574 10.0.0.3:3268 ESTABLISHED 4780
TCP 10.0.0.3:30579 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30580 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30581 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30582 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30583 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30584 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30589 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:30629 10.0.0.3:389 ESTABLISHED 2196
TCP 10.0.0.3:31127 10.0.0.3:65379 ESTABLISHED 3436
TCP 10.0.0.3:31136 10.0.0.3:3268 CLOSE_WAIT 572
TCP 10.0.0.3:31139 10.0.0.3:3268 CLOSE_WAIT 1424
TCP 10.0.0.3:31146 10.0.0.3:389 CLOSE_WAIT 1424
TCP 10.0.0.3:31645 10.0.0.3:389 ESTABLISHED 3436
TCP 10.0.0.3:31881 10.0.0.3:389 ESTABLISHED 1472
TCP 10.0.0.3:32020 10.0.0.3:135 TIME_WAIT 0
TCP 10.0.0.3:32021 10.0.0.3:65379 TIME_WAIT 0
TCP 10.0.0.3:32022 10.0.0.3:65379 TIME_WAIT 0
TCP 10.0.0.3:32061 10.0.0.3:80 ESTABLISHED 6172
TCP 10.0.0.3:32153 10.0.0.3:135 TIME_WAIT 0
TCP 10.0.0.3:32154 10.0.0.3:135 TIME_WAIT 0
TCP 10.0.0.3:32155 10.0.0.3:65379 TIME_WAIT 0
TCP 10.0.0.3:32176 10.0.0.3:445 ESTABLISHED 4
TCP 10.0.0.3:32179 10.0.0.3:135 ESTABLISHED 944
TCP 10.0.0.3:32180 10.0.0.3:65379 ESTABLISHED 944
TCP 10.0.0.3:32186 10.0.0.2:139 ESTABLISHED 4
TCP 10.0.0.3:32192 10.0.0.3:80 ESTABLISHED 1388
TCP 10.0.0.3:32205 10.0.0.3:135 ESTABLISHED 6388
TCP 10.0.0.3:32206 10.0.0.3:65379 ESTABLISHED 6388
TCP 10.0.0.3:32222 10.0.0.77:445 ESTABLISHED 4
TCP 10.0.0.3:32224 10.0.0.4:445 ESTABLISHED 4
TCP 10.0.0.3:33131 10.0.0.3:389 CLOSE_WAIT 820
TCP 10.0.0.3:52932 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.3:52933 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.3:52934 10.0.0.3:3268 CLOSE_WAIT 3436
TCP 10.0.0.3:52935 10.0.0.3:3268 CLOSE_WAIT 3436
TCP 10.0.0.3:52940 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.3:53074 10.0.0.3:691 ESTABLISHED 572
TCP 10.0.0.3:53347 10.0.0.3:691 ESTABLISHED 2592
TCP 10.0.0.3:53348 10.0.0.3:691 ESTABLISHED 4780
TCP 10.0.0.3:56895 10.0.0.3:389 CLOSE_WAIT 7592
TCP 10.0.0.3:60173 10.0.0.3:389 CLOSE_WAIT 7592
TCP 10.0.0.3:65379 10.0.0.3:3097 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:4251 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:31127 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:32180 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:32206 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:65461 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.3:65462 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.43:2944 ESTABLISHED 944
TCP 10.0.0.3:65379 10.0.0.83:1147 ESTABLISHED 944
TCP 10.0.0.3:65439 10.0.0.97:3487 ESTABLISHED 808
TCP 10.0.0.3:65461 10.0.0.3:65379 ESTABLISHED 2196
TCP 10.0.0.3:65462 10.0.0.3:65379 ESTABLISHED 2196
TCP 10.0.0.3:65487 10.0.0.3:389 CLOSE_WAIT 3316
TCP 10.0.0.3:65508 10.0.0.3:389 CLOSE_WAIT 3436
TCP 10.0.0.22:1080 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.22:1745 0.0.0.0:0 LISTENING 6668
TCP 10.0.0.22:8080 0.0.0.0:0 LISTENING 6172
TCP 10.0.0.22:8443 0.0.0.0:0 LISTENING 6172
TCP 68.145.104.177:25 70.24.34.153:4030 TIME_WAIT 0
TCP 68.145.104.177:80 0.0.0.0:0 LISTENING 6172
TCP 68.145.104.177:389 68.145.104.177:30568 ESTABLISHED 944
TCP 68.145.104.177:389 68.145.104.177:32201 TIME_WAIT 0
TCP 68.145.104.177:443 0.0.0.0:0 LISTENING 6172
TCP 68.145.104.177:443 210.76.124.50:37172 ESTABLISHED 6172
TCP 68.145.104.177:3389 10.0.0.43:1505 ESTABLISHED 1192
TCP 68.145.104.177:3389 68.145.183.14:2425 ESTABLISHED 1192
TCP 68.145.104.177:30568 68.145.104.177:389 ESTABLISHED 3436
TCP 68.145.104.177:32168 195.245.80.67:25 ESTABLISHED 572
TCP 68.145.104.177:32203 66.139.79.227:25 TIME_WAIT 0
TCP 68.145.104.177:32214 216.119.106.127:25 TIME_WAIT 0
TCP 68.145.104.177:32233 213.158.72.25:25 TIME_WAIT 0
TCP 68.145.104.177:32243 165.212.8.51:25 SYN_SENT 572
TCP 68.145.104.177:32250 64.202.160.122:25 SYN_SENT 572
TCP 68.145.104.177:32252 66.84.242.55:25 TIME_WAIT 0
TCP 68.145.104.177:32255 212.181.91.6:25 SYN_SENT 572
TCP 68.145.104.177:32264 64.202.160.122:25 SYN_SENT 572
TCP 127.0.0.1:53 0.0.0.0:0 LISTENING 256
TCP 127.0.0.1:80 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:389 127.0.0.1:30623 ESTABLISHED 944
TCP 127.0.0.1:443 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:444 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:445 127.0.0.1:32189 ESTABLISHED 4
TCP 127.0.0.1:2404 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:6897 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:8080 0.0.0.0:0 LISTENING 6172
TCP 127.0.0.1:8081 0.0.0.0:0 LISTENING 5836
TCP 127.0.0.1:8443 0.0.0.0:0 LISTENING 6172
TCP 127.0.0.1:11223 0.0.0.0:0 LISTENING 6172
TCP 127.0.0.1:30623 127.0.0.1:389 ESTABLISHED 256
TCP 127.0.0.1:32189 127.0.0.1:445 ESTABLISHED 4
TCP 127.0.0.1:32207 127.0.0.1:5100 TIME_WAIT 0
UDP 0.0.0.0:42 *:* 3288
UDP 0.0.0.0:135 *:* 1136
UDP 0.0.0.0:445 *:* 4
UDP 0.0.0.0:500 *:* 944
UDP 0.0.0.0:1434 *:* 1560
UDP 0.0.0.0:1701 *:* 4
UDP 0.0.0.0:2967 *:* 3100
UDP 0.0.0.0:3011 *:* 2592
UDP 0.0.0.0:3015 *:* 572
UDP 0.0.0.0:3021 *:* 888
UDP 0.0.0.0:3024 *:* 2556
UDP 0.0.0.0:3032 *:* 1832
UDP 0.0.0.0:3045 *:* 188
UDP 0.0.0.0:3068 *:* 1356
UDP 0.0.0.0:3082 *:* 4780
UDP 0.0.0.0:3089 *:* 4780
UDP 0.0.0.0:3098 *:* 3436
UDP 0.0.0.0:3099 *:* 3436
UDP 0.0.0.0:3102 *:* 5544
UDP 0.0.0.0:3116 *:* 572
UDP 0.0.0.0:3124 *:* 1356
UDP 0.0.0.0:3127 *:* 1356
UDP 0.0.0.0:3134 *:* 1356
UDP 0.0.0.0:3454 *:* 1472
UDP 0.0.0.0:3456 *:* 572
UDP 0.0.0.0:3457 *:* 6172
UDP 0.0.0.0:3458 *:* 572
UDP 0.0.0.0:4375 *:* 716
UDP 0.0.0.0:4500 *:* 944
UDP 0.0.0.0:5093 *:* 2760
UDP 0.0.0.0:5999 *:* 2456
UDP 0.0.0.0:18732 *:* 7948
UDP 0.0.0.0:19092 *:* 4764
UDP 0.0.0.0:22169 *:* 1356
UDP 0.0.0.0:22170 *:* 1356
UDP 0.0.0.0:22171 *:* 1356
UDP 0.0.0.0:22172 *:* 1356
UDP 0.0.0.0:22173 *:* 1356
UDP 0.0.0.0:29197 *:* 2416
UDP 0.0.0.0:32261 *:* 6668
UDP 0.0.0.0:32262 *:* 572
UDP 0.0.0.0:32267 *:* 572
UDP 0.0.0.0:33130 *:* 820
UDP 0.0.0.0:36754 *:* 3384
UDP 0.0.0.0:38293 *:* 628
UDP 0.0.0.0:53120 *:* 3600
UDP 0.0.0.0:56893 *:* 7592
UDP 0.0.0.0:62039 *:* 1424
UDP 0.0.0.0:65394 *:* 1356
UDP 0.0.0.0:65422 *:* 256
UDP 0.0.0.0:65423 *:* 256
UDP 0.0.0.0:65441 *:* 808
UDP 0.0.0.0:65444 *:* 1784
UDP 0.0.0.0:65449 *:* 1784
UDP 0.0.0.0:65458 *:* 2196
UDP 0.0.0.0:65486 *:* 3316
UDP 0.0.0.0:65493 *:* 3436
UDP 0.0.0.0:65494 *:* 3436
UDP 10.0.0.3:53 *:* 256
UDP 10.0.0.3:67 *:* 3316
UDP 10.0.0.3:68 *:* 3316
UDP 10.0.0.3:88 *:* 944
UDP 10.0.0.3:123 *:* 1472
UDP 10.0.0.3:137 *:* 4
UDP 10.0.0.3:138 *:* 4
UDP 10.0.0.3:389 *:* 944
UDP 10.0.0.3:464 *:* 944
UDP 10.0.0.3:1718 *:* 496
UDP 10.0.0.3:1719 *:* 496
UDP 10.0.0.3:1745 *:* 6668
UDP 10.0.0.3:2535 *:* 3316
UDP 10.0.0.3:4451 *:* 6668
UDP 10.0.0.3:4452 *:* 6668
UDP 10.0.0.3:4453 *:* 6668
UDP 10.0.0.3:4454 *:* 6668
UDP 10.0.0.3:4455 *:* 6668
UDP 10.0.0.3:4456 *:* 6668
UDP 10.0.0.3:4457 *:* 6668
UDP 10.0.0.3:4458 *:* 6668
UDP 10.0.0.3:4459 *:* 6668
UDP 10.0.0.3:4460 *:* 6668
UDP 10.0.0.3:4461 *:* 6668
UDP 10.0.0.3:4462 *:* 6668
UDP 10.0.0.3:4463 *:* 6668
UDP 10.0.0.3:4464 *:* 6668
UDP 10.0.0.3:4465 *:* 6668
UDP 10.0.0.3:4466 *:* 6668
UDP 10.0.0.3:4467 *:* 6668
UDP 10.0.0.3:4468 *:* 6668
UDP 10.0.0.3:4469 *:* 6668
UDP 10.0.0.3:4470 *:* 6668
UDP 10.0.0.3:4471 *:* 6668
UDP 10.0.0.3:4472 *:* 6668
UDP 10.0.0.3:4473 *:* 6668
UDP 10.0.0.3:4474 *:* 6668
UDP 10.0.0.3:4475 *:* 6668
UDP 10.0.0.3:4476 *:* 6668
UDP 10.0.0.3:4477 *:* 6668
UDP 10.0.0.3:4478 *:* 6668
UDP 10.0.0.3:4479 *:* 6668
UDP 10.0.0.3:4480 *:* 6668
UDP 10.0.0.3:4481 *:* 6668
UDP 10.0.0.3:4482 *:* 6668
UDP 10.0.0.3:4483 *:* 6668
UDP 10.0.0.3:4484 *:* 6668
UDP 10.0.0.3:4485 *:* 6668
UDP 10.0.0.3:4486 *:* 6668
UDP 10.0.0.3:4487 *:* 6668
UDP 10.0.0.3:4488 *:* 6668
UDP 10.0.0.3:4489 *:* 6668
UDP 10.0.0.3:4490 *:* 6668
UDP 10.0.0.3:4491 *:* 6668
UDP 10.0.0.3:4492 *:* 6668
UDP 10.0.0.3:4493 *:* 6668
UDP 10.0.0.3:4494 *:* 6668
UDP 10.0.0.3:4495 *:* 6668
UDP 10.0.0.3:4496 *:* 6668
UDP 10.0.0.3:4497 *:* 6668
UDP 10.0.0.3:4498 *:* 6668
UDP 10.0.0.3:4499 *:* 6668
UDP 10.0.0.3:4501 *:* 6668
UDP 10.0.0.3:4502 *:* 6668
UDP 10.0.0.3:4503 *:* 6668
UDP 10.0.0.3:4504 *:* 6668
UDP 10.0.0.3:4505 *:* 6668
UDP 10.0.0.3:4506 *:* 6668
UDP 10.0.0.3:4507 *:* 6668
UDP 10.0.0.3:4508 *:* 6668
UDP 10.0.0.3:4509 *:* 6668
UDP 10.0.0.3:4510 *:* 6668
UDP 10.0.0.3:4511 *:* 6668
UDP 10.0.0.3:4512 *:* 6668
UDP 10.0.0.3:4513 *:* 6668
UDP 10.0.0.3:4514 *:* 6668
UDP 10.0.0.3:4515 *:* 6668
UDP 10.0.0.3:4516 *:* 6668
UDP 10.0.0.3:4517 *:* 6668
UDP 10.0.0.3:4518 *:* 6668
UDP 10.0.0.3:4519 *:* 6668
UDP 10.0.0.3:4520 *:* 6668
UDP 10.0.0.3:4521 *:* 6668
UDP 10.0.0.3:4522 *:* 6668
UDP 10.0.0.3:4523 *:* 6668
UDP 10.0.0.3:4524 *:* 6668
UDP 10.0.0.3:4525 *:* 6668
UDP 10.0.0.3:4526 *:* 6668
UDP 10.0.0.3:4527 *:* 6668
UDP 10.0.0.3:4528 *:* 6668
UDP 10.0.0.3:4529 *:* 6668
UDP 10.0.0.3:4530 *:* 6668
UDP 10.0.0.3:4531 *:* 6668
UDP 10.0.0.3:4532 *:* 6668
UDP 10.0.0.3:4533 *:* 6668
UDP 10.0.0.3:4534 *:* 6668
UDP 10.0.0.3:4535 *:* 6668
UDP 10.0.0.3:4536 *:* 6668
UDP 10.0.0.3:4537 *:* 6668
UDP 10.0.0.3:4538 *:* 6668
UDP 10.0.0.3:4539 *:* 6668
UDP 10.0.0.3:4540 *:* 6668
UDP 10.0.0.3:4541 *:* 6668
UDP 10.0.0.3:4542 *:* 6668
UDP 10.0.0.3:4543 *:* 6668
UDP 10.0.0.3:4544 *:* 6668
UDP 10.0.0.3:4545 *:* 6668
UDP 10.0.0.3:4546 *:* 6668
UDP 10.0.0.3:4547 *:* 6668
UDP 10.0.0.3:4548 *:* 6668
UDP 10.0.0.3:4549 *:* 6668
UDP 10.0.0.3:4550 *:* 6668
UDP 10.0.0.3:4551 *:* 6668
UDP 10.0.0.3:4552 *:* 6668
UDP 10.0.0.3:4553 *:* 6668
UDP 10.0.0.3:4554 *:* 6668
UDP 10.0.0.3:4555 *:* 6668
UDP 10.0.0.3:4556 *:* 6668
UDP 10.0.0.3:4557 *:* 6668
UDP 10.0.0.3:4558 *:* 6668
UDP 10.0.0.3:4559 *:* 6668
UDP 10.0.0.3:4560 *:* 6668
UDP 10.0.0.22:88 *:* 944
UDP 10.0.0.22:123 *:* 1472
UDP 10.0.0.22:389 *:* 944
UDP 10.0.0.22:464 *:* 944
UDP 10.0.0.22:1718 *:* 496
UDP 10.0.0.22:1719 *:* 496
UDP 10.0.0.22:1745 *:* 6668
UDP 68.145.104.177:88 *:* 944
UDP 68.145.104.177:123 *:* 1472
UDP 68.145.104.177:389 *:* 944
UDP 68.145.104.177:464 *:* 944
UDP 127.0.0.1:53 *:* 256
UDP 127.0.0.1:123 *:* 1472
UDP 127.0.0.1:3027 *:* 1472
UDP 127.0.0.1:3028 *:* 1472
UDP 127.0.0.1:3456 *:* 572
UDP 127.0.0.1:3458 *:* 572
UDP 127.0.0.1:65421 *:* 256
UDP 127.0.0.1:65490 *:* 3288


ISAInfo run completed at 5/17/2005 10:33:36 PM


 
Reply With Quote
 
Bill Peng [MSFT]
Guest
Posts: n/a

 
      05-18-2005
Hi Charles,

Thank you for the info.

I'm very sorry that I forgot the port 88 will be used by Kerberos Security...So this should be the
root cause of the issue.

Let's change the port to 8888 and test it again.

Thank you for your patience and I look forward to your update.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so that others may learn
and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>X-Trace-PostClient-IP: 68.145.183.14
>From: "Charles Irwin" <>
>Newsgroups: microsoft.public.windows.server.sbs
>References: <Dx3he.1335531$8l.823152@pd7tw1no> <BmpQn8dWFHA.3052

@TK2MSFTNGXA01.phx.gbl> <asdie.1380006$Xk.129555@pd7tw3no> <tvJ$iTpWFHA.3052
@TK2MSFTNGXA01.phx.gbl> <wqnie.1389517$6l.79670@pd7tw2no> <cHgTa90WFHA.3928
@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Web Hosting on a SBS2003 member server
>Lines: 7297
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <BSzie.1397747$8l.121867@pd7tw1no>
>Date: Wed, 18 May 2005 04:52:49 GMT
>NNTP-Posting-Host: 24.71.223.147
>X-Complaints-To:
>X-Trace: pd7tw1no 1116391969 24.71.223.147 (Tue, 17 May 2005 22:52:49 MDT)
>NNTP-Posting-Date: Tue, 17 May 2005 22:52:49 MDT
>Organization: Shaw Residential Internet
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-online.de!

216.40.28.103.MISMATCH!newscene.com!novia!newscon0 6.news.prodigy.com!prodigy.net!
border1.nntp.dca.giganews.com!nntp.giganews.com!pd 7cy2so!pd7cy1no!shaw.ca!
pd7tw1no.POSTED!53ab2750!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:119368
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>No I had not redirected to port 88 on the internal server.
>I did change the default website 88 and can access the web site with
>http://10.0.0.4:88
>from a browser on the private network.
>
>I ran the isainfo.vbe script I am posting the text file here:
>Report created by ISAInfo version 1.9.8
>System Date and Time: 5/17/2005 10:32:51 PM
>Running as GTC\administrator, in Array GTCSBS03, on Server GTCSBS03
>
>************************************************* ***************
>ENTERPRISE CONFIGURATION
>************************************************* ***************
>This is not an Enterprise Array..
>
>************************************************* ***************
>ARRAYS
>************************************************* ***************
>GTCSBS03
> Description :
> Created : 4/10/2005 11:22:19 PM
> Type : Standard Edition
> Mode : Integrated
>
>Packet Filter Log
> Enabled : True
> Selected Fields : date, time, source-ip, destination-ip, protocol,
>param#1, param#2, filter-rule, interface
> Log Format : W3C
> Path : %ISAInstallFolder%\ISALogs
> Keep old logs : 7
> Cycle Logs : Daily
> Compress Log Files : True
>
>Firewall Log
> Enabled : True
> Selected Fields : c-ip, cs-username, c-agent, date, time,
>s-computername, r-host, r-ip, r-port, time-taken, cs-bytes, sc-bytes,
>cs-protocol, cs-transport, s-operation, sc-status, sessionid, connectionid
> Log Format : W3C
> Path : %ISAInstallFolder%\ISALogs
> Keep old logs : 7
> Cycle Logs : Daily
> Compress Log Files : True
>
>Web Proxy Log
> Enabled : True
> Selected Fields : c-ip, cs-username, c-agent, date, time,
>s-computername, cs-referred, r-host, r-ip, r-port, time-taken, cs-bytes,
>sc-bytes, cs-protocol, s-operation, cs-uri, s-object-source, sc-status
> Log Format : W3C
> Path : %ISAInstallFolder%\ISALogs
> Keep old logs : 7
> Cycle Logs : Daily
> Compress Log Files : True
>
>SSL Tunnel Port Ranges :
> NNTP
> From : 563
> To : 563
>
> SSL
> From : 443
> To : 443
>
>Outgoing Web Requests
> Use the same listener configuration for all internal IP addresses: True
> Authentication :
> Use integrated Windows authentication
>
> TCP Port : 8080
> SSL Port : 8443
> Number of connections : Unlimited
> Connection Timeout ( seconds ) : 900
> Ask unauthenticated users for identification : True
> Resolve requests in Array before routing : True
>
>Incoming Web Requests
> Use the same listener configuration for all IP addresses: False
> Server : GTCSBS03
> IP Address : 68.145.104.177
> Authentication :
> Use integrated Windows authentication
>
> Server certificate
> Friendly Name :
> Issued by : mail.geomodeling.com
> Issued to : mail.geomodeling.com
> Expiration Date : 4/11/2010 5:36:18 AM
>
> TCP Port : 80
> SSL Port : 443
> Cache SSL Responses : True
> Number of connections : 300
> Connection Timeout ( seconds ) : 900
> Ask unauthenticated users for identification : False
> Resolve requests in Array before routing : False
>
>Publish automatic discovery infomation : False
>
>************************************************* ***************
>SITE AND CONTENT RULES
>************************************************* ***************
>Allow rule
> Description :
> Enabled : True
> Rule Applies to : All Destinations
> Access to the specified destinations : Allowed
> Rule Applies to : Any Request
> Rule Applies to : All Content Types
>
>Small Business Server All Users Site and Content Rule
> Description :
> Enabled : True
> Rule Applies to : Selected Destination Set
> Destination Set Used : Small Business Server Microsoft Update Sites
> Access to the specified destinations : Allowed
> Rule Applies to : Any Request
> Rule Applies to : All Content Types
>
>Small Business Server Internet Access Site and Content Rule
> Description :
> Enabled : True
> Rule Applies to : All External Destinations
> Access to the specified destinations : Allowed
> Rule Applies to : Specified Users
> Users Included : GTC\SBS Internet Users ,
> Rule Applies to : All Content Types
>
>************************************************* ***************
>PROTOCOL RULES
>************************************************* ***************
>Small Business Internet Access Protocol Rule
> Description :
> Enabled : True
> Action taken with requests : Allow
> Rule applies to : All IP Traffic
> Rule Applies to : Specified Users
> Users Included : GTC\SBS Internet Users ,
>
>************************************************* ***************
>IP PACKET FILTERS
>************************************************* ***************
>Enable Packet Filtering : True
>Enable Intrusion detection : False
>Enable IP routing : True
>Enable filtering of IP fragments : False
>Enable filtering IP options : False
>Log packets from 'Allow' Filters : False
>PPTP though ISA firewall : False
>
>ICMP outbound
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP all outbound
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>ICMP ping response (in)
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP ping response
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>ICMP source quench
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP source quench
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>ICMP timeout in
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP timeout
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>ICMP unreachable in
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP unreachable
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS DHCP Client
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : UDP
> Direction : Inbound and Outbound
> Local Port : 68
> Remote Port : 67
> Local Computer Filter Applies to this IP : 0.0.0.0
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS DnsLookupPredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : DNS Lookup
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS FTP 20 In CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound
> Local Port: Any Port
> Remote Port : 20
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS FTP 20 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port : 20
> Remote Port : Any Port
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS FTP 21 In CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound
> Local Port : 21
> Remote Port : Any Port
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS FTP 21 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 21
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS HTTP 80 Out CustomFilter
> Description :
> Enabled : False
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 80
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS IcmpPingQueryPredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : ICMP ping query
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS IdentdPredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : Identd
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS NNTP 119 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 119
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS NTP 123 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : UDP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 123
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS POP3 110 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 110
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS PptpCallPredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : PPTP call
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS PptpReceivePredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : PPTP receive
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS Remote Web Workplace CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound
> Local Port : 4125
> Remote Port : Any Port
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS SMTP 25 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 25
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS SmtpPredefinedType
> Description :
> Enabled : True
> Filter Mode : Allow
> Predefined Filter : SMTP
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS TS 3389 In CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound
> Local Port : 3389
> Remote Port : Any Port
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>SBS TS 3389 Out CustomFilter
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Outbound
> Local Port: Any Port
> Remote Port : 3389
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to : All Remote Computers
>
>Spamfighter1
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound and Outbound
> Local Port: Any Port
> Remote Port : 2409
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to Host: 212.112.132.62
>
>SPAMfighter2
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound and Outbound
> Local Port : Dynamic port ( 1024 - 5000 )
> Remote Port : 80
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to Host: 193.9.159.92
>
>SPAMfighter3
> Description :
> Enabled : True
> Filter Mode : Allow
> Filter Type : Custom
> Protocol : TCP
> Direction : Inbound and Outbound
> Local Port : Dynamic port ( 1024 - 5000 )
> Remote Port : 80
> Local Computer Filter Applies to : Default External IP
> Remote Computer Filter Applies to Host: 83.90.215.169
>
>************************************************* ***************
>WEB PUBLISHING RULES
>************************************************* ***************
>Small Business RPC over HTTP Publishing Rule
> Description :
> Enabled : True
> Destinations : Selected Destination Set
> Destination Set Used : Small Business RPC over HTTP Destination Set
> Action : Redirect to publishing.GTC.local
> Send Original Host Header : True
> HTTP Redirect Port : 80
> SSL Redirect Port : 443
> FTP Redirect Port : 21
> Redirect HTTP requests as : HTTP Requests
> Redirect SSL requests as : SSL Requests
> Require SSL for Published Site : False
> Rule Applies to : Any Request
> ** No additional configuration data found.
>
>Small Business RUP Publishing Rule
> Description :
> Enabled : True
> Destinations : Selected Destination Set
> Destination Set Used : Small Business RUP Destination Set
> Action : Redirect to publishing.GTC.local
> Send Original Host Header : True
> HTTP Redirect Port : 80
> SSL Redirect Port : 443
> FTP Redirect Port : 21
> Redirect HTTP requests as : HTTP Requests
> Redirect SSL requests as : SSL Requests
> Require SSL for Published Site : False
> Rule Applies to : Any Request
> ** No additional configuration data found.
>
>Small Business OWA Web Publishing Rule
> Description :
> Enabled : True
> Destinations : Selected Destination Set
> Destination Set Used : Small Business Exchange OWA Destination Set
> Action : Redirect to publishing.GTC.local
> Send Original Host Header : True
> HTTP Redirect Port : 80
> SSL Redirect Port : 443
> FTP Redirect Port : 21
> Redirect HTTP requests as : HTTP Requests
> Redirect SSL requests as : SSL Requests
> Require SSL for Published Site : False
> Rule Applies to : Any Request
> ** No additional configuration data found.
>
>Default rule
> Description :
> Enabled : True
> Destinations : All Destinations
> Action : Discard the request
> Redirect HTTP requests as : HTTP Requests
> Redirect SSL requests as : HTTP Requests
> Require SSL for Published Site : False
> Rule Applies to : Any Request
> ** No additional configuration data found.
>
>************************************************* ***************
>SERVER PUBLISHING RULES
>************************************************* ***************
>Geomodel-Web
> Description : New IIS Server
> Enabled : True
> IP Address of Internal Server : 10.0.0.4
> External IP Address on ISA Server : 68.145.104.177
> Protocol Used : Port 88 Redirect
> Primary Port Used by Protocol : 88
> Rule Applies to : Any Request
>
>
>************************************************* ***************
>BANDWIDTH RULES
>************************************************* ***************
>Enable Bandwidth Control : False
>
>Default rule
> Description :
> Enabled : True
> Rule applies to : All IP Traffic
> Rule Applies to : All Destinations
> Rule Applies to : Any Request
> Rule Applies to : All Content Types
> BandWidthPriority : Default bandwidth priority
>
>************************************************* ***************
>SCHEDULES
>************************************************* ***************
>Weekends
> Description :
> 12 1 2 3 4 5 6 7 8 9 10 11 12 1 2 3 4 5 6 7 8 9
>10 11
>Sunday A A A A A A A A A A A A A A A A A A A A A A
>A A
>Monday I I I I I I I I I I I I I I I I I I I I I I
>I I
>Tuesday I I I I I I I I I I I I I I I I I I I I I I
>I I
>Wednesday I I I I I I I I I I I I I I I I I I I I I I
>I I
>Thursay I I I I I I I I I I I I I I I I I I I I I I
>I I
>Friday I I I I I I I I I I I I I I I I I I I I I I
>I I
>Saturday A A A A A A A A A A A A A A A A A A A A A A
>A A
>
>Work hours
> Description :
> 12 1 2 3 4 5 6 7 8 9 10 11 12 1 2 3 4 5 6 7 8 9
>10 11
>Sunday I I I I I I I I I I I I I I I I I I I I I I
>I I
>Monday I I I I I I I I I A A A A A A A A I I I I I
>I I
>Tuesday I I I I I I I I I A A A A A A A A I I I I I
>I I
>Wednesday I I I I I I I I I A A A A A A A A I I I I I
>I I
>Thursay I I I I I I I I I A A A A A A A A I I I I I
>I I
>Friday I I I I I I I I I A A A A A A A A I I I I I
>I I
>Saturday I I I I I I I I I I I I I I I I I I I I I I
>I I
>
>************************************************* ***************
>DESTINATION SETS
>************************************************* ***************
>Small Business Business Card Destination Set
> Description :
> DomainName: mail.geomodeling.com
> Path: /
> DomainName: mail.geomodeling.com
> Path: /images/*
>
>Small Business Exchange OWA Destination Set
> Description :
> DomainName: mail.geomodeling.com
> Path: /Exchange/*
> DomainName: mail.geomodeling.com
> Path: /public/*
> DomainName: mail.geomodeling.com
> Path: /exchweb/*
>
>Small Business RPC over HTTP Destination Set
> Description :
> DomainName: mail.geomodeling.com
> Path: /rpc/*
>
>Small Business RUP Destination Set
> Description :
> DomainName: mail.geomodeling.com
> Path: /Remote/*
> DomainName: mail.geomodeling.com
> Path: /ClientHelp/*
>
>Small Business Server Microsoft Update Sites
> Description :
> DomainName: *.windowsupdate.microsoft.com
> DomainName: watson.microsoft.com
> DomainName: office.microsoft.com/productupdates
>
>************************************************* ***************
>CLIENT ADDRESS SETS
>************************************************* ***************
> No Client Address Sets found
>
>************************************************* ***************
>PROTOCOL DEFINITIONS
>************************************************* ***************
>AOL Instant Messenger
> Description : AOL instant messenger protocol
> Initial Connection Port Number : 5190
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Archie
> Description : Archie protocol
> Initial Connection Port Number : 1525
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Chargen(TCP)
> Description : Character generator protocol (TCP)
> Initial Connection Port Number : 19
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Chargen(UDP)
> Description : Character generator protocol (UDP)
> Initial Connection Port Number : 19
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Daytime(TCP)
> Description : Daytime protocol (TCP)
> Initial Connection Port Number : 13
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Daytime(UDP)
> Description : Daytime protocol (UDP)
> Initial Connection Port Number : 13
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Discard(TCP)
> Description : Discard protocol (TCP)
> Initial Connection Port Number : 9
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Discard(UDP)
> Description : Discard protocol (UDP)
> Initial Connection Port Number : 9
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>DNS Query
> Description : Domain Name System
> Initial Connection Port Number : 53
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>DNS Query Server
> Description : Domain Name System - Server
> Initial Connection Port Number : 53
> Initial Protocol Type : UDP
> Initial Direction : Receive and Then Send
>
>DNS Zone Transfer
> Description : DNS Zone Transfer protocol
> Initial Connection Port Number : 53
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>DNS Zone Transfer Server
> Description : DNS zone transfer - Server
> Initial Connection Port Number : 53
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>Echo (TCP)
> Description : Echo protocol (TCP)
> Initial Connection Port Number : 7
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Echo (UDP)
> Description : Echo protocol (UDP)
> Initial Connection Port Number : 7
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Finger
> Description : Finger protocol
> Initial Connection Port Number : 79
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Gopher
> Description : Gopher protocol
> Initial Connection Port Number : 70
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>HTTP
> Description : Hyper Text Transfer Protocol (HTTP)
> Initial Connection Port Number : 80
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>HTTPS
> Description : Secure Hyper Text Transfer Protocol
> Initial Connection Port Number : 443
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>HTTPS Server
> Description : Secure Hyper Text Transfer Protocol - Server
> Initial Connection Port Number : 443
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>ICA
> Description : Citrix Intelligent Console Architecture protocol
> Initial Connection Port Number : 1494
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>ICQ
> Description : ICQ instant messenger protocol (legacy)
> Initial Connection Port Number : 4000
> Initial Protocol Type : UDP
> Initial Direction : Send Only
> Secondary Connections:
> ** Port Range : 0 - 0
> Protocol Type : TCP
> Direction : Inbound
> ** Port Range : 0 - 0
> Protocol Type : UDP
> Direction : Receive Only
> ** Port Range : 1025 - 5000
> Protocol Type : TCP
> Direction : Inbound
> ** Port Range : 1025 - 5000
> Protocol Type : TCP
> Direction : Outbound
>
>ICQ 2000
> Description : ICQ 2000 protocol
> Initial Connection Port Number : 5190
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Ident
> Description : Ident protocol
> Initial Connection Port Number : 113
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>IMAP4
> Description : Interactive Mail Access Protocol
> Initial Connection Port Number : 143
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>IMAP4 Server
> Description : Interactive Mail Access Protocol (IMAP) - Server
> Initial Connection Port Number : 143
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>IMAPS
> Description : Secure Interactive Mail Access Protocol
> Initial Connection Port Number : 993
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>IMAPS Server
> Description : Secure Interactive Mail Access Protocol (IMAP) - Server
> Initial Connection Port Number : 993
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>IRC
> Description : Internet Relay Chat
> Initial Connection Port Number : 6667
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Kerberos-Adm(TCP)
> Description : Kerberos administration (TCP)
> Initial Connection Port Number : 749
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Kerberos-Adm(UDP)
> Description : Kerberos administration (UDP)
> Initial Connection Port Number : 749
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Kerberos-IV
> Description : Kerberos IV Authentication protocol
> Initial Connection Port Number : 750
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Kerberos-Sec(TCP)
> Description : Kerberos V authentication protocol
> Initial Connection Port Number : 88
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Kerberos-Sec(UDP)
> Description : Kerberos V authentication protocol (UDP)
> Initial Connection Port Number : 88
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>LDAP
> Description : Lightweight Directory Access Protocol (LDAP)
> Initial Connection Port Number : 389
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>LDAP GC (Global Catalog)
> Description : Lightweight Directory Access Protocol global catalog protocol
> Initial Connection Port Number : 3268
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>LDAPS
> Description : Secure Lightweight Directory Access Protocol
> Initial Connection Port Number : 636
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>LDAPS GC (Global Catalog)
> Description : Secure Lightweight Directory Access Protocol global catalog
>protocol
> Initial Connection Port Number : 3269
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Microsoft SQL Server
> Description : Microsoft SQL Server protocol
> Initial Connection Port Number : 1433
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>MSN
> Description : MSN Internet Access protocol
> Initial Connection Port Number : 569
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>MSN Messenger
> Description : MSN messenger protocol
> Initial Connection Port Number : 1863
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Net2Phone
> Description : Net2Phone protocol
> Initial Connection Port Number : 6801
> Initial Protocol Type : UDP
> Initial Direction : Send Only
> Secondary Connections:
> ** Port Range : 0 - 0
> Protocol Type : TCP
> Direction : Inbound
> ** Port Range : 0 - 0
> Protocol Type : UDP
> Direction : Receive Only
> ** Port Range : 1025 - 5000
> Protocol Type : UDP
> Direction : Send Only
> ** Port Range : 2000 - 2100
> Protocol Type : UDP
> Direction : Send and Then Receive
> ** Port Range : 3000 - 4000
> Protocol Type : TCP
> Direction : Inbound
> ** Port Range : 7800 - 7900
> Protocol Type : TCP
> Direction : Outbound
>
>Net2Phone registration
> Description : Net2Phone registration protocol
> Initial Connection Port Number : 6500
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>NetBios Datagram
> Description : NetBIOS Datagram protocol
> Initial Connection Port Number : 138
> Initial Protocol Type : UDP
> Initial Direction : Send Only
>
>NetBios Name Service
> Description : NetBIOS Name Service protocol
> Initial Connection Port Number : 137
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>NetBios Session
> Description : NetBIOS Session protocol
> Initial Connection Port Number : 139
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>NNTP
> Description : Network News Transfer Protocol (NNTP)
> Initial Connection Port Number : 119
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>NNTP Server
> Description : Network News Transfer Protocol - Server
> Initial Connection Port Number : 119
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>NNTPS
> Description : Secure Network News Transfer Protocol
> Initial Connection Port Number : 563
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>NNTPS Server
> Description : Secure Network News Transfer Protocol - Server
> Initial Connection Port Number : 563
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>NTP (UDP)
> Description : Network Time Protocol (UDP)
> Initial Connection Port Number : 123
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
> Secondary Connections:
> ** Port Range : 123 - 123
> Protocol Type : UDP
> Direction : Receive Only
>
>POP2
> Description : Post Office Protocol v.2
> Initial Connection Port Number : 109
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>POP3
> Description : Post Office Protocol v.3
> Initial Connection Port Number : 110
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>POP3 Server
> Description : Post Office Protocol v.3 - Server
> Initial Connection Port Number : 110
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>POP3S
> Description : Secure Post Office Protocol v.3
> Initial Connection Port Number : 995
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>POP3S Server
> Description : Secure Post Office Protocol v.3 - Server
> Initial Connection Port Number : 995
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>Port 88 Redirect
> Description :
> Initial Connection Port Number : 88
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>Quote (TCP)
> Description : Quote of the day protocol (TCP)
> Initial Connection Port Number : 17
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Quote (UDP)
> Description : Quote of the day protocol (UDP)
> Initial Connection Port Number : 17
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>RADIUS
> Description : Remote Authentication Dial-In User Service protocol
> Initial Connection Port Number : 1812
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>RADIUS Accounting
> Description : Remote Authentication Dial-In User Service accounting
>protocol
> Initial Connection Port Number : 1813
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>RDP (Terminal Services)
> Description : Remote Desktop Protocol (Terminal Services)
> Initial Connection Port Number : 3389
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>RIP
> Description : Routing Information Protocol
> Initial Connection Port Number : 520
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>Rlogin
> Description : Remote login protocol
> Initial Connection Port Number : 513
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>SMTP
> Description : Simple Mail Transfer Protocol (SMTP)
> Initial Connection Port Number : 25
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>SMTP Server
> Description : Simple Mail Transfer Protocol - Server
> Initial Connection Port Number : 25
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>SMTPS
> Description : Secure Simple Mail Transfer Protocol
> Initial Connection Port Number : 465
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>SMTPS Server
> Description : Secure Simple Mail Transfer Protocol (SMTP) - Server
> Initial Connection Port Number : 465
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>SNMP
> Description : Simple Network Management Protocol
> Initial Connection Port Number : 161
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>SNMP Trap
> Description : Simple Netowrk Management Protocol - Trap
> Initial Connection Port Number : 162
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>SSH
> Description : Secure Shell protocol
> Initial Connection Port Number : 22
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Telnet
> Description : Telnet protocol
> Initial Connection Port Number : 23
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Telnet Server
> Description : Telnet protocol - Server
> Initial Connection Port Number : 23
> Initial Protocol Type : TCP
> Initial Direction : Inbound
>
>TFTP
> Description : Trivial File Transfer Protocol
> Initial Connection Port Number : 69
> Initial Protocol Type : UDP
> Initial Direction : Send Only
> Secondary Connections:
> ** Port Range : 0 - 0
> Protocol Type : UDP
> Direction : Receive and Then Send
>
>Time (TCP)
> Description : Time protocol (TCP)
> Initial Connection Port Number : 37
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>Time (UDP)
> Description : Time protocol (UDP)
> Initial Connection Port Number : 37
> Initial Protocol Type : UDP
> Initial Direction : Send and Then Receive
>
>WhoIs
> Description : Nickname/Whois protocol
> Initial Connection Port Number : 43
> Initial Protocol Type : TCP
> Initial Direction : Outbound
>
>************************************************* ***************
>CONTENT GROUPS
>************************************************* ***************
>Application
> Description : Applications
> Content Types : application/hta, application/x-internet-signup,
>application/x-pkcs7-certificates, application/x-sv4crc,
>application/octet-stream, application/x-pkcs7-certreqresp,
>application/pkcs7-signature, application/x-cpio,
>application/set-registration-initiation, application/x-dvi,
>application/pkcs7-mime, application/x-csh, application/x-iphone, .hta, .isp,
>.spc, .sv4crc, .bin, .p7r, .evy, .p7s, .cpio, .setreg, .dvi, .p7b, .p7c,
>.csh, .iii, .man, application/x-troff-man, .hdf, application/x-hdf, .mvb,
>application/x-msmediaview, .texi, application/x-texinfo, .setpay,
>application/set-payment-initiation, .stl, application/vndms-pkistl, .ins,
>.oda, application/oda, .nc, application/x-netcdf, .sh, application/x-sh,
>.shar, application/x-shar, .tcl, application/x-tcl, .ms,
>application/x-troff-ms, .ods, application/oleobject, .axs,
>application/olescript, .dir, application/x-director, .sit,
>application/x-stuffit, .crl, application/pkix-crl, .pub,
>application/x-mspublisher, .spl, application/futuresplash, .hqx,
>application/mac-binhex40, .p10, application/pkcs10, .dxr, .vbs, .js,
>application/x-javascript, .m13, .me, application/x-troff-me, .latex,
>application/x-latex, .m14, .cer, application/x-x509-ca-cert, .p12,
>application/x-pkcs12, .pfx, .der, .texinfo, .p7m, .dcr, .sct,
>text/scriptlet, .fif, application/fractals, .exe, .sst,
>application/vndms-pkicertstore, .pko, application/vndms-pkipko, .scd,
>application/x-msschedule, .bcpio, application/x-bcpio, .dll,
>application/x-msdownload, .roff, application/x-troff, .t, .prf,
>application/pics-rules, .tr, .src, application/x-wais-source, .acx,
>application/internet-property-stream, .cat, application/vndms-pkiseccat,
>.cdf, application/x-cdf, .sv4cpio, application/x-sv4cpio, .tex,
>application/x-tex, .ustar, application/x-ustar, .crt
>
>Application Data Files
> Description : Files containing data for applications
> Content Types : application/x-mscardfile, application/x-perfmon,
>application/x-msclip, application/x-msmoney, application/winhlp,
>application/x-mswrite, application/x-msterminal, application/x-msmetafile,
>.crd, .clp, .hlp, .mny, .pma, .pmc, .pml, .pmr, .pmw, .trm, .wmf, .wri
>
>Audio
> Description : Audio files
> Content Types : audio/*, .ra, .ram, .rmi, .au, .snd, .aif, .aifc, .wav,
>.m3u, .mid, .mp3
>
>Compressed Files
> Description : Compressed Files
> Content Types : application/x-gzip, application/x-tar, application/x-gtar,
>application/x-compress, application/x-compressed,
>application/x-zip-compressd, .gtar, .gz, .tar, .tgz, .z, .zip
>
>Documents
> Description : Documents
> Content Types : text/tab-separated-values, text/xml, text/h323,
>application/postscript, application/pdf, .ai, .323, .eps, .pdf, .ps, .tsv,
>.xml
>
>HTML Documents
> Description : HTML Documents
> Content Types : text/webviewhtml, text/html, .htm, .html, .htt, .stm, .xsl
>
>Images
> Description : All known types of images
> Content Types : .cod, .cmx, .ief, .pbm, .pnm, .ppm, .gif, .bmp, .jfif,
>.jpe, .jpg, .jpeg, .ico, .pgm, .ras, .rgb, .dib, .tif, .xbm, .xpm, .xwd,
>image/*
>
>Macro Documents
> Description : Documents that may contain macros
> Content Types : application/msword, application/vnd.ms-excel,
>application/x-msaccess, application/vnd.ms-project,
>application/vnd.ms-powerpoint, application/vnd.ms-works, application/rtf,
>.doc, .dot, .mpp, .mdb, .pot, .pps, .ppt, .wcm, .wdb, .wks, .xla, .xlc,
>.xls, .xlt, .xlm, .xlw
>
>Text
> Description : Text content
> Content Types : .txt, .h, .c, .htc, .vcf, .etx, .uls, .css, .bas, .rtx,
>text/plain, text/x-component, text/x-vcard, text/x-setext
>
>Video
> Description : Video files
> Content Types : video/*, .asf, .asr, .asx, .avi, .ivf, .lsf, .lsx, .mov,
>.movie, .mlv, .mp2, .mpa, .mpe, .mpg, .mpeg, .mpv2, .qt
>
>VRML
> Description : VRML
> Content Types : x-world/x-vrml, .flr, .wrl, .wrz, .xaf, .xof
>
>************************************************* ***************
>BANDWIDTH PRIORITIES
>************************************************* ***************
>Default bandwidth priority
> Description :
> Outbound Bandwidth : 100
> Inbound Bandwidth : 100
>
>************************************************* ***************
>DIAL UP ENTRIES
>************************************************* ***************
> No DialUp Entries found
>
>************************************************* ***************
>CACHE CONFIGURATION
>************************************************* ***************
>HTTP Cache Configuration :
> HTTP Caching Enabled : True
> Update Objects in Cache : Normally
>
>FTP Cache Configuration :
> FTP Caching Enabled : True
> Time to live for all objects : 1440 minutes
>
>Active Caching Configuration :
> Active Caching Enabled : True
> Retrieve Files : Normally
>
>Advanced Options Selected :
> Cache objects that have an unspecified last modification time : True
> Cache objects even If they do not have an HTTP status code of 200 : True
> Cache Dynamic Content : False
> Maximum Size of URL cached in memory ( bytes ) : 12800
> If web site of expired object cannot be reached :
> Return the expired object only If expiration was :
> At less than 50% of original TTL
> But no more than 60 minutes
> Percentage of free memory used for cache : 50
>
>************************************************* ***************
>SCHEDULED CONTENT DOWNLOAD
>************************************************* ***************
> No Scheduled Download tasks have been defined in this array.
>
>************************************************* ***************
>APPLICATION FILTERS
>************************************************* ***************
>SMTP Filter
> Description : Filters SMTP traffic
> Enabled: False
> GUID: {179A0A70-1EF5-11D3-B160-00A0C9E3F998}
> Protocols
> Vendor: Microsoft
> Version: 3.0
> Settings:
> ** Disconnect on SMTP Filter rule violation : False
>
> ** Attachments
> None Defined
>
> ** Rejected Senders
> None Defined
>
> ** Rejected Domains
> None Defined
>
> ** Keywords
> None Defined
>
> ** Commands
> Command : BDAT
> - MaxLen : 20
> - Default : True
> - Enabled : True
> Command : DATA
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : EHLO
> - MaxLen : 71
> - Default : True
> - Enabled : True
> Command : EXPN
> - MaxLen : 71
> - Default : True
> - Enabled : True
> Command : HELO
> - MaxLen : 71
> - Default : True
> - Enabled : True
> Command : HELP
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : MAIL FROM:
> - MaxLen : 266
> - Default : True
> - Enabled : True
> Command : NOOP
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : QUIT
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : RCPT TO:
> - MaxLen : 266
> - Default : True
> - Enabled : True
> Command : RSET
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : SAML FROM:
> - MaxLen : 268
> - Default : True
> - Enabled : True
> Command : SEND FROM:
> - MaxLen : 268
> - Default : True
> - Enabled : True
> Command : SOML FROM:
> - MaxLen : 268
> - Default : True
> - Enabled : True
> Command : TURN
> - MaxLen : 6
> - Default : True
> - Enabled : True
> Command : VRFY
> - MaxLen : 71
> - Default : True
> - Enabled : True
>
>
>SOCKS V4 Filter
> Description : Enables SOCKS 4 communication
> Enabled: True
> GUID: {25765C04-C80B-494C-914E-286297DB8C8E}
> Protocols
> Vendor: Microsoft
> Version: 3.0
> Settings:
> SocksPort = 1080
>
>Streaming Media Filter
> Description : Enables streaming protocols
> Enabled: True
> GUID: {473ED0E1-6371-4ED2-9F95-A676B66659A2}
> Protocols
> ** MMS - Windows Media
> Description : Microsoft Media Streaming protocol - Client
> Guid: {C9C5500B-B782-43E8-AB1F-EB8CAB33C691}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 1755
> PortHigh: 1755
> Protocol: UDP - Outbound
> PortLow: 1755
> PortHigh: 1755
> ** {CAE68AE1-1A22-4470-84EB-C4E82F009E5F}
> ** MMS - Windows Media Server
> Description : Microsoft Streaming Media protocol - Server
> Guid: {209D2BAE-7846-4B53-A649-D0529EA173B9}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 1755
> PortHigh: 1755
> Protocol: UDP - Inbound
> PortLow: 1755
> PortHigh: 1755
> ** PNM - RealNetworks protocol (Client)
> Description : RealNetworks Streaming Media Protocol (PNM) - Client
> Guid: {CC263ACF-2F2B-4FF4-B45D-3D7F8AC43D8D}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 7070
> PortHigh: 7070
> ** PNM - RealNetworks protocol (Server)
> Description : RealNetworks Streaming Media protocol (PNM) - Server
> Guid: {17844508-CBC3-48C3-BC5B-723E99B6B95A}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 7070
> PortHigh: 7070
> ** RTSP
> Description : Real Time Streaming Protocol - Client
> Guid: {D8D4D4A5-B30E-40A5-8061-C7CD7C1B9179}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 554
> PortHigh: 554
> ** RTSP Server
> Description : Real Time Streaming Protocol - Server
> Guid: {D0F0EC38-CFAD-42ED-B86B-CEFB71CC6936}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 554
> PortHigh: 554
> Vendor: Microsoft
> Version: 3.0
> Settings:
> RtspTransportList =
>RTP/AVP;UDP,X-REAL-RDT/UDP;UDP,X-REAL-RDT/TCP;TCP,X-PN-TNG/UDP;UDP,X-PN-

TNG/TCP;TCP
>
>HTTP Redirector Filter
> Description : Redirects requests from Firewall and SecureNAT clients to the
>Web Proxy service
> Enabled: True
> GUID: {67DD9952-F6F9-11D2-A9E5-0000F8773208}
> Protocols
> Vendor: Microsoft
> Version: 3.0
> Settings:
> State = Redirect to local Web Proxy service.
>
>FTP Access Filter
> Description : Enables FTP protocols (client and server)
> Enabled: True
> GUID: {680A928F-22B3-11D1-B026-0000F87750CB}
> Protocols
> ** FTP
> Description : FTP Protocol
> Guid: {F2E5EE50-030C-11D3-ACD4-00A0C9D7559D}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 21
> PortHigh: 21
> ** FTP Download only
> Description : FTP Download only Protocol
> Guid: {90B63894-2533-42EC-B7F6-A899F43F4AAE}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 21
> PortHigh: 21
> ** FTP Server
> Description : FTP Server Protocol
> Guid: {5CDDC642-932D-4134-A1DB-250574052D00}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 21
> PortHigh: 21
> Vendor: Microsoft
> Version: 3.0
> Settings:
>
>DNS intrusion detection filter
> Description : Intercepts and analyzes DNS traffic destined for the internal
>network
> Enabled: True
> GUID: {9649A5E0-52A4-4E2A-831D-DE093CCB6B05}
> Protocols
> Vendor: Internet Security Systems (ISS), Inc.
> Version: 3.0
> Settings:
> DNS_Hostname_Overflow = 1
> DNS_Length_Overflow = 1
> DNS_Zone_High_Port = 1
> DNS_Zone_Transfer = 1
>
>POP intrusion detection filter
> Description : Checks for POP buffer overflow attacks
> Enabled: True
> GUID: {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4}
> Protocols
> Vendor: Internet Security Systems (ISS), Inc.
> Version: 3.0
> Settings:
>
>RPC Filter
> Description : Enables publishing of RPC servers
> Enabled: True
> GUID: {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB}
> Protocols
> ** Any RPC Server
> Description : Allows all RPC interfaces
> Guid: {E4BF0A2E-D51D-48CE-9FBC-19A694413833}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 135
> PortHigh: 135
> ** UUID: {D84A98AA-12BD-4E31-9114-9AF0FBD81570}
> Type = 1
> Comment = Pseudo UUID, enables all RPC uuids
> ** Exchange RPC Server
> Description : Allows publishing Exchange server for RPC access from
>external network
> Guid: {2297692C-E2E7-40BD-9A32-5F4D49455AA5}
> Primary Connections
> Protocol: TCP - Inbound
> PortLow: 135
> PortHigh: 135
> ** UUID: {0E4A0156-DD5D-11D2-8C2F-00C04FB6BCDE}
> Type = 1
> Comment = Information Store (1)
> ** UUID: {10F24E8E-0FA6-11D2-A910-00C04F990F3B}
> Type = 1
> Comment = Information Store (3)
> ** UUID: {1453C42C-0FA6-11D2-A910-00C04F990F3B}
> Type = 1
> Comment = Information Store (2)
> ** UUID: {1544F5E0-613C-11D1-93DF-00C04FD7BD09}
> Type = 1
> Comment = Directory RFR
> ** UUID: {1A190310-BB9C-11CD-90F8-00AA00466520}
> Type = 1
> Comment = Database
> ** UUID: {38A94E72-A9BC-11D2-8FAF-00C04fA378FF}
> Type = 1
> Comment = MTA 'QAdmin'
> ** UUID: {469D6EC0-0D87-11CE-B13F-00AA003BAC6C}
> Type = 1
> Comment = System Attendant Public Interface
> ** UUID: {83D72BF0-0D89-11CE-B13F-00AA003BAC6C}
> Type = 1
> Comment = System Attendant Private
> ** UUID: {89742ACE-A9ED-11CF-9C0C-08002BE7AE86}
> Type = 1
> Comment = Store admin (2)
> ** UUID: {99E64010-B032-11D0-97A4-00C04FD6551D}
> Type = 1
> Comment = Store admin (1)
> ** UUID: {9E8EE830-4459-11CE-979B-00AA005FFEBE}
> Type = 1
> Comment = MTA
> ** UUID: {A4F1DB00-CA47-1067-B31E-00DD010662DA}
> Type = 1
> Comment = Store admin (3)
> ** UUID: {A4F1DB00-CA47-1067-B31F-00DD010662DA}
> Type = 1
> Comment = Store EMSMDB
> ** UUID: {F5CC59B4-4264-101A-8C59-08002B2F8426}
> Type = 1
> Comment = Directory DRS
> ** UUID: {F5CC5A18-4264-101A-8C59-08002B2F8426}
> Type = 1
> Comment = Directory NSP
> ** UUID: {F5CC5A7C-4264-101A-8C59-08002B2F8426}
> Type = 1
> Comment = Directory XDS
> ** UUID: {F930C514-1215-11D3-99A5-00A0C9B61B04}
> Type = 1
> Comment = System Attendant Cluster
> Vendor: Microsoft
> Version: 3.0
> Settings:
>
>H.323 Filter
> Description : Microsoft H.323 filter
> Enabled: False
> GUID: {FE440D49-AB26-11D2-A101-00C04FB6CFB6}
> Protocols
> ** H.323 Protocol
> Description : H.323 protocol - Allow Q.931/H.245/RTP/RTCP/T.120
> Guid: {41192800-1D25-11D3-8F7C-00C04F57B90B}
> Primary Connections
> Protocol: TCP - Outbound
> PortLow: 1720
> PortHigh: 1720
> Vendor: Microsoft
> Version: 3.0
> Settings:
> AllowOutgoingCalls = True
> AllowVideo = True
> AllowIncomingCalls = True
> UseLRQ = False
> AllowT120 = True
> AllowAudio = True
> GKLocation =
>
>************************************************* ***************
>WEB FILTERS
>************************************************* ***************
> No Web Filters found
>
>************************************************* ***************
>NETWORK CONFIGURATION
>************************************************* ***************
>To route requests to upstream servers :
> Use Primary Connection
>
>************************************************* ***************
>ROUTING RULES
>************************************************* ***************
>Default rule
> Description :
> Enabled : True
> Order : 1
> Rule Applies to : All Destinations
> Process Requests by : Retrieving them directly from the specified
>destination
> Use DialUp Entry for Primary Route : False
> Use DialUp Entry for Backup Route : False
>
> Search cache for : A valid version of the object, retrieve If necessary
> Cache Content : If source and request headers indicate to cache
> Redirect HTTP requests as : HTTP Requests
> Redirect SSL requests as : HTTP Requests
> Require SSL for Published Site : False
>
>************************************************* ***************
>LAT
>************************************************* ***************
> Description :
> From : 10.0.0.0
> To : 10.255.255.255
>
>************************************************* ***************
>LDT
>************************************************* ***************
>*.GTC.local
> Description :
>
>************************************************* ***************
>FIREWALL CLIENT CONFIGURATION
>************************************************* ***************
>Clients Connect to ISA Server by DNS Name : GTCSBS03
>Enable ISA Firewall automatic discovery in Firewall Client : False
>Application Settings:
>exchng32
> Disable = 0
>icq
> RemoteBindUdpPorts = 0
> ServerBindTcpPorts = 0,1025-5000
> NameResolutionForLocalHost = P
>inetinfo
> Disable = 1
>kernel32
> Disable = 1
>lsass
> Disable = 1
>mapisp32
> Disable = 0
>net2fone
> ServerBindTcpPorts = 0
>outlook
> Disable = 0
>raplayer
> RemoteBindUdpPorts = 6970-7170
> LocalBindTcpPorts = 7070
>realplay
> RemoteBindUdpPorts = 6970-7170
> LocalBindTcpPorts = 7070
>rpcss
> Disable = 1
>rvplayer
> RemoteBindUdpPorts = 6970-7170
> LocalBindTcpPorts = 7070
>services
> Disable = 1
>spoolss
> Disable = 1
>svchost
> Disable = 1
>w3proxy
> Disable = 1
>winlogon
> Disable = 1
>wspsrv
> Disable = 1
>
>************************************************* ***************
>WEB BROWSER CONFIGURATION
>************************************************* ***************
>Configure web browser during firewall client setup : True
>DNS Name : GTCSBS03
>Automatically discover settings : False
>
>Bypass proxy for local servers : True
>Directly access computers specified in the LDT : True
>Directly access these servers or domains :
>
>If ISA Server is unavailable, use backup route : False
>
>************************************************* ***************
>SERVER PROPERTIES
>************************************************* ***************
>Server : GTCSBS03
>
> ISA FQDN : gtcsbs03.GTC.local
> Description :
> ISA Product ID : 53941-880-4487192-97537
> ISA Version : 3.0.1200.166 SP1
> Created : 4/10/2005 11:22:20 PM
> Domain Controller :
> Intra Array Address : 10.0.0.3
> Installation Folder : C:\Program Files\Microsoft ISA Server
> Load Factor : 100
>
>HARDWARE INFO
> MFR: To Be Filled By O.E.M.
> Model: To Be Filled By O.E.M.
> Description: AT/AT COMPATIBLE
> 2047 MB RAM
>
>VMEM INFO
> Location: C:\pagefile.sys
> FileSystem: NTFS
> Min Size: 2046 MB
> Max Size: 4092 MB
> Curr Size: 2047.48046875 MB
>
>PROCESSOR INFO
> CPU0
> Type: AMD Opteron(tm) Processor 242 @ 1593 MHz
> CPU Status: Unknown
> Operating Status: Running/Full Power
> L2 Cache Size: 1 KB
> L2 Cache Speed: MHz
>
> CPU1
> Type: AMD Opteron(tm) Processor 242 @ 1593 MHz
> CPU Status: Unknown
> Operating Status: Running/Full Power
> L2 Cache Size: 1 KB
> L2 Cache Speed: MHz
>
>OPERATING SYSTEM INFO
> OS: Microsoft(R) Windows(R) Server 2003 for Small Business Server
> Build: 5.2.3790
> Service Pack: 0.0
> WinDir: C:\WINDOWS
> System Role: Primary Domain Controller
> Domain: GTC.local
>
>INSTALLED OS HOTFIXES
> HotFix ID: Q147222
> Description: No data available
>
> HotFix ID: Q828026
> Description: Windows Media Player Hotfix [See Q828026 for more information]
>
> HotFix ID: KB867460
> Description: Windows Server 2003 Hotfix - KB 867460
>
> HotFix ID: KB886903
> Description: Windows Server 2003 Hotfix - KB 886903
>
> HotFix ID: SP1
> Description: Microsoft .NET Framework 1.1 Service Pack 1
>
> HotFix ID: KB870669
> Description: Microsoft Data Access Components KB870669
>
> HotFix ID: Q832483
> Description: Security Update for Microsoft Data Access Components
>
> HotFix ID: Q828026
> Description: Windows Media Player Hotfix [See Q828026 for more information]
>
> HotFix ID: Q828026
> Description: Windows Media Player Hotfix [See Q828026 for more information]
>
> HotFix ID: KB885492
> Description: Windows Media Player 9 Hotfix [See KB885492 for more
>information]
>
> HotFix ID: KB819696
> Description: Windows Server 2003 Hotfix - KB 819696
>
> HotFix ID: KB822132
> Description: Windows Server 2003 Hotfix - KB 822132
>
> HotFix ID: KB822742
> Description: Windows Server 2003 Hotfix - KB 822742
>
> HotFix ID: KB822743
> Description: Windows Server 2003 Hotfix - KB 822743
>
> HotFix ID: KB822744
> Description: Windows Server 2003 Hotfix - KB 822744
>
> HotFix ID: KB822745
> Description: Windows Server 2003 Hotfix - KB 822745
>
> HotFix ID: KB822925
> Description: Windows Server 2003 Hotfix - KB 822925
>
> HotFix ID: KB823182
> Description: Windows Server 2003 Hotfix - KB 823182
>
> HotFix ID: KB823353
> Description: Windows Server 2003 Hotfix - KB 823353
>
> HotFix ID: KB823559
> Description: Windows Server 2003 Hotfix - KB 823559
>
> HotFix ID: KB823980
> Description: Windows Server 2003 Hotfix - KB 823980
>
> HotFix ID: KB824073
> Description: Windows Server 2003 Hotfix - KB 824073
>
> HotFix ID: KB824105
> Description: Windows Server 2003 Hotfix - KB 824105
>
> HotFix ID: KB824139
> Description: Windows Server 2003 Hotfix - KB 824139
>
> HotFix ID: KB824141
> Description: Windows Server 2003 Hotfix - KB 824141
>
> HotFix ID: KB824146
> Description: Windows Server 2003 Hotfix - KB 824146
>
> HotFix ID: KB824151
> Description: Windows Server 2003 Hotfix - KB 824151
>
> HotFix ID: KB825117
> Description: Windows Server 2003 Hotfix - KB 825117
>
> HotFix ID: KB825119
> Description: Windows Server 2003 Hotfix - KB 825119
>
> HotFix ID: KB826238
> Description: Windows Server 2003 Hotfix - KB 826238
>
> HotFix ID: KB826936
> Description: Windows Server 2003 Hotfix - KB 826936
>
> HotFix ID: KB828035
> Description: Windows Server 2003 Hotfix - KB 828035
>
> HotFix ID: KB828741
> Description: Windows Server 2003 Hotfix - KB 828741
>
> HotFix ID: KB833987
> Description: Windows Server 2003 Hotfix - KB 833987
>
> HotFix ID: KB834707
> Description: Windows Server 2003 Hotfix - KB 834707
>
> HotFix ID: KB835732
> Description: Windows Server 2003 Hotfix - KB 835732
>
> HotFix ID: KB837001
> Description: Windows Server 2003 Hotfix - KB 837001
>
> HotFix ID: KB838894
> Description: Windows Server 2003 Hotfix - KB 838894
>
> HotFix ID: KB839645
> Description: Windows Server 2003 Hotfix - KB 839645
>
> HotFix ID: KB840315
> Description: Windows Server 2003 Hotfix - KB 840315
>
> HotFix ID: KB840374
> Description: Windows Server 2003 Hotfix - KB 840374
>
> HotFix ID: KB840987
> Description: Windows Server 2003 Hotfix - KB 840987
>
> HotFix ID: KB841356
> Description: Windows Server 2003 Hotfix - KB 841356
>
> HotFix ID: KB841533
> Description: Windows Server 2003 Hotfix - KB 841533
>
> HotFix ID: KB842773
> Description: Windows Server 2003 Hotfix - KB 842773
>
> HotFix ID: KB867282
> Description: Windows Server 2003 Hotfix - KB 867282
>
> HotFix ID: KB867460
> Description: Windows Server 2003 Hotfix - KB 867460
>
> HotFix ID: KB870763
> Description: Windows Server 2003 Hotfix - KB 870763
>
> HotFix ID: KB871250
> Description: Windows Server 2003 Hotfix - KB 871250
>
> HotFix ID: KB873333
> Description: Windows Server 2003 Hotfix - KB 873333
>
> HotFix ID: KB873376
> Description: Windows Server 2003 Hotfix - KB 873376
>
> HotFix ID: KB883646
> Description: Windows Server 2003 Hotfix - KB 883646
>
> HotFix ID: KB883935
> Description: Windows Server 2003 Hotfix - KB 883935
>
> HotFix ID: KB885250
> Description: Windows Server 2003 Hotfix - KB 885250
>
> HotFix ID: KB885834
> Description: Windows Server 2003 Hotfix - KB 885834
>
> HotFix ID: KB885835
> Description: Windows Server 2003 Hotfix - KB 885835
>
> HotFix ID: KB885836
> Description: Windows Server 2003 Hotfix - KB 885836
>
> HotFix ID: KB885881
> Description: Windows Server 2003 Hotfix - KB 885881
>
> HotFix ID: KB886903
> Description: Windows Server 2003 Hotfix - KB 886903
>
> HotFix ID: KB888113
> Description: Windows Server 2003 Hotfix - KB 888113
>
> HotFix ID: KB890047
> Description: Windows Server 2003 Hotfix - KB 890047
>
> HotFix ID: KB890175
> Description: Windows Server 2003 Hotfix - KB 890175
>
> HotFix ID: KB890859
> Description: Windows Server 2003 Hotfix - KB890859
>
> HotFix ID: KB890923
> Description: Windows Server 2003 Hotfix - KB890923
>
> HotFix ID: KB891711
> Description: Windows Server 2003 Hotfix - KB 891711
>
> HotFix ID: KB891781
> Description: Windows Server 2003 Hotfix - KB 891781
>
> HotFix ID: KB893066
> Description: Windows Server 2003 Hotfix - KB893066
>
> HotFix ID: KB893086
> Description: Windows Server 2003 Hotfix - KB893086
>
> HotFix ID: KB832880
> Description: Windows Small Business Server 2003 Hotfix - KB 832880
>
> HotFix ID: KB872769
> Description: Windows Small Business Server 2003 Hotfix - KB 872769
>
>************************************************* ***************
>INSTALLED ISA HOTFIXES
>************************************************* ***************
>Small Business Server 2003 release
>
>Service Pack 1
> Files :
>browser.map,bwserver.dll,dailysum.exe,fltrsnk1.dl l,ftpfltr.dll,gkadm.dll,gksvc.dll,h323asn1.dll,h32

3fltr.dll,h323snap.dll,hfperf.dll,httpadm.dll,http fltr.dll,issdnsad.dll,issfltr.dll,latui.dll,msfpc. dll,msfpc
com.dll,msfpcsnp.dll,msfpcui.dll,mspadmin.exe,mspa pi.dll,mspfltex.sys,msphlpr.dll,mspmsg.dll,mspn
at.sys,os.map,prxatq.dll,repgen.exe,repsnap.dll,rp cfltr.dll,rws32.dll,smtpcred.exe,smtpfadm.dll,sm
tpfltr.dll,socksadm.dll,socksflt.dll,stpext32.dll, stpsrvex.dll,strmadmn.dll,strmfltr.dll,sumgen.dll, vps2
.dll,w3prefch.exe,w3proxy.exe,wspcpl32.cpl,wspsrv. exe,wspwsp.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 313249
>
>Hotfix Number : SP1.177
> Files : w3pinet.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 323889
>
>Hotfix Number : SP1.255
> Files :
>mspfltex.sys,mspadmin.exe,wspsrv.exe,os.map,w3pro xy.exe,msphlpr.dll,bwcpmon.dll,bwserver.dl

l,h323fltr.dll,hfperf.dll,mspmon.dll,socksflt.dll, socksprf.dll,wspperf.dll,fltrsnk1.dll,msfpccom.dll ,msfp
csnp.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 331062
>
>Hotfix Number : SP1.256
> Files : issfltr.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 331065
>
>Hotfix Number : SP1.257
> Files : mspadmin.exe,msphlpr.dll,w3proxy.exe,wspsrv.exe
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 331066
>
>Hotfix Number : SP1.265
> Files : wspwsp.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 815051
>
>Hotfix Number : SP1.277
> Files :
>10053.htm,10053r.htm,10054.htm,10054r.htm,10060.h tm,10060r.htm,10061.htm,10061r.htm,11

001.htm,11001r.htm,11002.htm,11002r.htm,11004.htm, 11004r.htm,12206.htm,12206r.htm,1460.
htm,1460r.htm,401r.htm,407.htm,502.htm,502r.htm,50 4.htm,504r.htm,64.htm,64r.htm,default.ht
m,defaultr.htm,2r.htm
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 816456
>
>Hotfix Number : SP1.285
> Files : h323fltr.dll,h323asn1.dll,gksvc.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 816458
>
>Hotfix Number : SP1.290
> Files : latui.dll,stpsrvex.dll,w3pinet.dll
> Installation Date : Sun Apr 10 23:22:26 2005
>
> KB Article : 816457
>
>************************************************* ***************
>ALERTS
>************************************************* ***************
>Server Publishing Failure
> Description : The server publishing rule is configured incorrectly.
> Active Since : 5/16/2005 10:16:38 AM
>
>Service shutdown
> Description : The service was stopped gracefully.
> Active Since : 5/12/2005 12:46:54 PM
>
>Service started
> Description : Service started.
> Active Since : 5/11/2005 6:10:26 PM
>
>************************************************* ***************
>ALERTS CONFIGURATION
>************************************************* ***************
>Alert action failure (The action associated with this alert failed.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache container initialization error (The cache container initialization
>failed and the initialization was ignored.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache container recovery complete (Recovery of a single cache container was
>completed.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache file resize failure (The operation to reduce the size of the cache
>file failed.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache initialization failure (The Web cache proxy was disabled because of a
>global failure.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache restoration completed (The cache content restoration was completed.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cache write error (There was a failure in writing content to the cache.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Cached object discarded (During cache recovery, an object with conflicting
>information was detected. The conflicting object was discarded.)
> Enabled: False
> Log event = True
> Action = Log to Event Log
>
>Component load failure (Failed to load an extension component.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Configuration error (An error occurred while reading configuration
>information.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Dial-on-demand failure (Failed to create a dial-on-demand connection, either
>because there is no answer or the line is busy.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>DNS intrusion (A host name overflow, length overflow, zone high port, or
>zone transfer attack occurred.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Event log failure (An attempt to log the event information to the system
>event log failed.)
> Enabled: False
> Log event = True
> Action = Run Command 'Net send localhost event log failure'
>
>Firewall communication failure (There is a failure in communication between
>the Firewall client and the ISA Server Firewall service.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Intrusion detected (An intrusion was attempted by an external user.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Invalid dial-on-demand credentials (Dial-on-demand credentials are invalid.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Invalid ODBC log credentials. (The specified user name or password for this
>ODBC database is invalid.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>IP packet dropped (IP packet was dropped according to specified policy.)
> Enabled: False
> Log event = True
> Action = Log to Event Log
>
>IP Protocol violation (A packet with invalid IP options was detected and the
>packet dropped.)
> Enabled: False
> Log event = True
> Action = Log to Event Log
>
>IP spoofing (The IP packet source address is not valid.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Log failure (One of the service logs failed.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Missing installation component (A component that was configured for the
>array is missing on this server.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Network configuration changed (A network configuration change that affects
>ISA Server was detected.)
> Enabled: False
> Log event = True
> Action = Log to Event Log
>
>No available ports (Failed to create a network socket because there are no
>available ports)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>OS component conflict (There is a conflict with one of the operating system
>components: NAT editor, ICS, or RRAS.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Oversized UDP packet (ISA Server dropped a UDP packet because it exceeded
>the maximum UDP packet size, as specified in the registry key.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>POP Intrusion (POP buffer overflow detected)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Report Summary Generation Failure (An error occurred while generating a
>report summary from log files)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Resource allocation failure (A resource allocation failure has occurred. For
>example, insufficient memory resources.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Routing (chaining) failure (The ISA Server failed to route the request to an
>upstream server.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Routing (chaining) recovery (The ISA Server resumed routing to an upstream
>server.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>RPC Filter - connectivity changed (The connectivity to the publishing RPC
>service changed)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Server Publishing Failure (The server publishing rule is configured
>incorrectly.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Server publishing is not applicable. (The server publishing rule cannot be
>applied.)
> Enabled: False
> Log event = True
> Action = Log to Event Log
>
>Server Publishing Recovery (The server publishing rule can now be applied.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Service Initialization failure (The service failed to initialize.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Service not responding (An ISA Server service terminated or stopped
>functioning unexpectedly.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Service shutdown (The service was stopped gracefully.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Service started (Service started.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>SMTP Filter event (An SMTP command rule was violated)
> Enabled: True
> SMTP Filter event = True
> Action = Log to Event Log
>
>SOCKS configuration failure (The port specified in SOCKS properties is in
>use by another protocol.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>The server is not in the array's site (All members of the array must be in
>the same site. This server is in a different site.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Unregistered event (An unregistered event occurred.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>Upstream chaining credentials (Upstream chaining credentials are invalid.)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>WMT live stream splitting failure (The streaming application filter
>encounter an error during WMT live stream splitting)
> Enabled: True
> Log event = True
> Action = Log to Event Log
>
>************************************************* ***************
>SERVICES AND DRIVERS
>************************************************* ***************
>** ISA Service States
>Web Proxy Service :
> Status : Running
> Sessions : 0
> Uptime : 113671 seconds
>
>Firewall Service :
> Status : Running
> Sessions : 2
> Uptime : 113672 seconds
>
>Scheduled Content Download Service :
> Status : Running
>
>** Drivers
>Abiosdsk
> DependOnSvc :
> DependOnGrp :
> Description : Abiosdsk
> Name : Abiosdsk
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Microsoft ACPI Driver
> DependOnSvc :
> DependOnGrp :
> Description : Microsoft ACPI Driver
> Name : ACPI
> PathName : C:\WINDOWS\system32\DRIVERS\ACPI.sys
> Started : True
> StartMode : Boot
> State : Running
>
>ACPIEC
> DependOnSvc :
> DependOnGrp :
> Description : ACPIEC
> Name : ACPIEC
> PathName : C:\WINDOWS\system32\drivers\ACPIEC.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>adpu160m
> DependOnSvc :
> DependOnGrp :
> Description : adpu160m
> Name : adpu160m
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>adpu320
> DependOnSvc :
> DependOnGrp :
> Description : adpu320
> Name : adpu320
> PathName : C:\WINDOWS\system32\DRIVERS\adpu320.sys
> Started : True
> StartMode : Boot
> State : Running
>
>afcnt
> DependOnSvc :
> DependOnGrp :
> Description : afcnt
> Name : afcnt
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>AFD Networking Support Environment
> DependOnSvc :
> DependOnGrp :
> Description : AFD Networking Support Environment
> Name : AFD
> PathName : C:\WINDOWS\system32\drivers\afd.sys
> Started : True
> StartMode : Auto
> State : Running
>
>Aha154x
> DependOnSvc :
> DependOnGrp :
> Description : Aha154x
> Name : Aha154x
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>aic78u2
> DependOnSvc :
> DependOnGrp :
> Description : aic78u2
> Name : aic78u2
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>aic78xx
> DependOnSvc :
> DependOnGrp :
> Description : aic78xx
> Name : aic78xx
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>AliIde
> DependOnSvc :
> DependOnGrp :
> Description : AliIde
> Name : AliIde
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>amdbusdr
> DependOnSvc :
> DependOnGrp :
> Description : amdbusdr
> Name : amdbusdr
> PathName : C:\WINDOWS\system32\DRIVERS\amdbusdr.sys
> Started : True
> StartMode : Boot
> State : Running
>
>AMD EIDE Driver
> DependOnSvc :
> DependOnGrp :
> Description : AMD EIDE Driver
> Name : AMDEIDE
> PathName : C:\WINDOWS\system32\DRIVERS\AmdEide.sys
> Started : True
> StartMode : Boot
> State : Running
>
>AMDPCI
> DependOnSvc :
> DependOnGrp :
> Description : AMDPCI
> Name : AMDPCI
> PathName : \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AMDPCI.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>RAS Asynchronous Media Driver
> DependOnSvc :
> DependOnGrp :
> Description : RAS Asynchronous Media Driver
> Name : AsyncMac
> PathName : C:\WINDOWS\system32\DRIVERS\asyncmac.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>Standard IDE/ESDI Hard Disk Controller
> DependOnSvc :
> DependOnGrp :
> Description : Standard IDE/ESDI Hard Disk Controller
> Name : atapi
> PathName : C:\WINDOWS\system32\DRIVERS\atapi.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Atdisk
> DependOnSvc :
> DependOnGrp :
> Description : Atdisk
> Name : Atdisk
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ati2mpad
> DependOnSvc :
> DependOnGrp :
> Description : ati2mpad
> Name : ati2mpad
> PathName : C:\WINDOWS\system32\DRIVERS\ati2mpad.sys
> Started : True
> StartMode : Manual
> State : Running
>
>ATM ARP Client Protocol
> DependOnSvc : Tcpip
> DependOnGrp :
> Description : ATM ARP Client Protocol
> Name : Atmarpc
> PathName : C:\WINDOWS\system32\DRIVERS\atmarpc.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>Audio Stub Driver
> DependOnSvc :
> DependOnGrp :
> Description : Audio Stub Driver
> Name : audstub
> PathName : C:\WINDOWS\system32\DRIVERS\audstub.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Broadcom NetXtreme Gigabit Ethernet
> DependOnSvc :
> DependOnGrp :
> Description : Broadcom NetXtreme Gigabit Ethernet
> Name : b57w2k
> PathName : C:\WINDOWS\system32\DRIVERS\b57xp32.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Beep
> DependOnSvc :
> DependOnGrp :
> Description : Beep
> Name : Beep
> PathName : C:\WINDOWS\system32\drivers\Beep.sys
> Started : True
> StartMode : System
> State : Running
>
>cbidf2k
> DependOnSvc :
> DependOnGrp :
> Description : cbidf2k
> Name : cbidf2k
> PathName : C:\WINDOWS\system32\drivers\cbidf2k.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>cd20xrnt
> DependOnSvc :
> DependOnGrp :
> Description : cd20xrnt
> Name : cd20xrnt
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Cdfs
> DependOnSvc :
> DependOnGrp : SCSI CDROM Class
> Description : Cdfs
> Name : Cdfs
> PathName : C:\WINDOWS\system32\drivers\Cdfs.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>CD-ROM Driver
> DependOnSvc :
> DependOnGrp : SCSI miniport
> Description : CD-ROM Driver
> Name : Cdrom
> PathName : C:\WINDOWS\system32\DRIVERS\cdrom.sys
> Started : False
> StartMode : System
> State : Stopped
>
>Changer
> DependOnSvc :
> DependOnGrp :
> Description : Changer
> Name : Changer
> PathName :
> Started : False
> StartMode : System
> State : Stopped
>
>Cluster Disk Driver
> DependOnSvc :
> DependOnGrp :
> Description : Cluster Disk Driver
> Name : ClusDisk
> PathName : C:\WINDOWS\system32\DRIVERS\ClusDisk.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>CmdIde
> DependOnSvc :
> DependOnGrp :
> Description : CmdIde
> Name : CmdIde
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Microsoft Composite Battery Driver
> DependOnSvc :
> DependOnGrp :
> Description : Microsoft Composite Battery Driver
> Name : Compbatt
> PathName : C:\WINDOWS\system32\DRIVERS\compbatt.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Cpqarray
> DependOnSvc :
> DependOnGrp :
> Description : Cpqarray
> Name : Cpqarray
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>cpqarry2
> DependOnSvc :
> DependOnGrp :
> Description : cpqarry2
> Name : cpqarry2
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>cpqcissm
> DependOnSvc :
> DependOnGrp :
> Description : cpqcissm
> Name : cpqcissm
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>cpqfcalm
> DependOnSvc :
> DependOnGrp :
> Description : cpqfcalm
> Name : cpqfcalm
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>CRC Disk Filter Driver
> DependOnSvc :
> DependOnGrp :
> Description : CRC Disk Filter Driver
> Name : crcdisk
> PathName : C:\WINDOWS\system32\DRIVERS\crcdisk.sys
> Started : True
> StartMode : Boot
> State : Running
>
>dac960nt
> DependOnSvc :
> DependOnGrp :
> Description : dac960nt
> Name : dac960nt
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>dellcerc
> DependOnSvc :
> DependOnGrp :
> Description : dellcerc
> Name : dellcerc
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>DfsDriver
> DependOnSvc :
> DependOnGrp :
> Description : DfsDriver
> Name : DfsDriver
> PathName : C:\WINDOWS\system32\drivers\Dfs.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Disk Driver
> DependOnSvc :
> DependOnGrp : SCSI miniport
> Description : Disk Driver
> Name : Disk
> PathName : C:\WINDOWS\system32\DRIVERS\disk.sys
> Started : True
> StartMode : Boot
> State : Running
>
>dlttape
> DependOnSvc :
> DependOnGrp :
> Description : dlttape
> Name : dlttape
> PathName : C:\WINDOWS\system32\DRIVERS\dlttape.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>dmboot
> DependOnSvc :
> DependOnGrp :
> Description : dmboot
> Name : dmboot
> PathName : C:\WINDOWS\system32\drivers\dmboot.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Logical Disk Manager Driver
> DependOnSvc :
> DependOnGrp :
> Description : Logical Disk Manager Driver
> Name : dmio
> PathName : C:\WINDOWS\system32\drivers\dmio.sys
> Started : True
> StartMode : Boot
> State : Running
>
>dmload
> DependOnSvc :
> DependOnGrp :
> Description : dmload
> Name : dmload
> PathName : C:\WINDOWS\system32\drivers\dmload.sys
> Started : True
> StartMode : Boot
> State : Running
>
>dpti2o
> DependOnSvc :
> DependOnGrp :
> Description : dpti2o
> Name : dpti2o
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>drvmcdb
> DependOnSvc :
> DependOnGrp :
> Description : drvmcdb
> Name : drvmcdb
> PathName : C:\WINDOWS\system32\DRIVERS\drvmcdb.sys
> Started : True
> StartMode : Boot
> State : Running
>
>DS1410D
> DependOnSvc :
> DependOnGrp :
> Description : DS1410D
> Name : DS1410D
> PathName : C:\WINDOWS\system32\drivers\DS1410D.SYS
> Started : False
> StartMode : Auto
> State : Stopped
>
>EXIFS
> DependOnSvc :
> DependOnGrp :
> Description : EXIFS
> Name : EXIFS
> PathName : \??\C:\WINDOWS\system32\drivers\exifs.sys
> Started : True
> StartMode : Auto
> State : Running
>
>Fastfat
> DependOnSvc :
> DependOnGrp :
> Description : Fastfat
> Name : Fastfat
> PathName : C:\WINDOWS\system32\drivers\Fastfat.sys
> Started : True
> StartMode : Disabled
> State : Running
>
>Floppy Disk Controller Driver
> DependOnSvc :
> DependOnGrp :
> Description : Floppy Disk Controller Driver
> Name : Fdc
> PathName : C:\WINDOWS\system32\DRIVERS\fdc.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Fips
> DependOnSvc :
> DependOnGrp :
> Description : Fips
> Name : Fips
> PathName : C:\WINDOWS\system32\drivers\Fips.sys
> Started : True
> StartMode : System
> State : Running
>
>Floppy Disk Driver
> DependOnSvc :
> DependOnGrp :
> Description : Floppy Disk Driver
> Name : Flpydisk
> PathName : C:\WINDOWS\system32\DRIVERS\flpydisk.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Volume Manager Driver
> DependOnSvc :
> DependOnGrp :
> Description : Volume Manager Driver
> Name : Ftdisk
> PathName : C:\WINDOWS\system32\DRIVERS\ftdisk.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Generic Packet Classifier
> DependOnSvc :
> DependOnGrp :
> Description : Generic Packet Classifier
> Name : Gpc
> PathName : C:\WINDOWS\system32\DRIVERS\msgpc.sys
> Started : True
> StartMode : Manual
> State : Running
>
>HID UPS Battery Driver
> DependOnSvc :
> DependOnGrp :
> Description : HID UPS Battery Driver
> Name : HidBatt
> PathName : C:\WINDOWS\system32\DRIVERS\HidBatt.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Microsoft HID Class Driver
> DependOnSvc :
> DependOnGrp :
> Description : Microsoft HID Class Driver
> Name : HidUsb
> PathName : C:\WINDOWS\system32\DRIVERS\hidusb.sys
> Started : True
> StartMode : Manual
> State : Running
>
>hpn
> DependOnSvc :
> DependOnGrp :
> Description : hpn
> Name : hpn
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>hpqdlt
> DependOnSvc :
> DependOnGrp :
> Description : hpqdlt
> Name : hpqdlt
> PathName : C:\WINDOWS\system32\DRIVERS\hpdltw32.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>hpt3xx
> DependOnSvc :
> DependOnGrp :
> Description : hpt3xx
> Name : hpt3xx
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>HTTP
> DependOnSvc :
> DependOnGrp :
> Description : HTTP
> Name : HTTP
> PathName : C:\WINDOWS\system32\Drivers\HTTP.sys
> Started : True
> StartMode : Manual
> State : Running
>
>i2omgmt
> DependOnSvc :
> DependOnGrp :
> Description : i2omgmt
> Name : i2omgmt
> PathName :
> Started : False
> StartMode : System
> State : Stopped
>
>i2omp
> DependOnSvc :
> DependOnGrp :
> Description : i2omp
> Name : i2omp
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>i8042 Keyboard and PS/2 Mouse Port Driver
> DependOnSvc :
> DependOnGrp :
> Description : i8042 Keyboard and PS/2 Mouse Port Driver
> Name : i8042prt
> PathName : C:\WINDOWS\system32\DRIVERS\i8042prt.sys
> Started : True
> StartMode : System
> State : Running
>
>iirsp
> DependOnSvc :
> DependOnGrp :
> Description : iirsp
> Name : iirsp
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>CD-Burning Filter Driver
> DependOnSvc :
> DependOnGrp :
> Description : CD-Burning Filter Driver
> Name : imapi
> PathName : C:\WINDOWS\system32\DRIVERS\imapi.sys
> Started : False
> StartMode : System
> State : Stopped
>
>IntelIde
> DependOnSvc :
> DependOnGrp :
> Description : IntelIde
> Name : IntelIde
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>IP Traffic Filter Driver
> DependOnSvc : tcpip
> DependOnGrp :
> Description : IP Traffic Filter Driver
> Name : IpFilterDriver
> PathName : \??\C:\WINDOWS\system32\drivers\ipfltdrv.sys
> Started : True
> StartMode : Auto
> State : Running
>
>IP in IP Tunnel Driver
> DependOnSvc : Tcpip
> DependOnGrp :
> Description : IP in IP Tunnel Driver
> Name : IpInIp
> PathName : C:\WINDOWS\system32\DRIVERS\ipinip.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>IP Network Address Translator
> DependOnSvc : Tcpip
> DependOnGrp :
> Description : IP Network Address Translator
> Name : IpNat
> PathName : C:\WINDOWS\system32\DRIVERS\ipnat.sys
> Started : True
> StartMode : Manual
> State : Running
>
>IPSEC driver
> DependOnSvc :
> DependOnGrp :
> Description : IPSEC driver
> Name : IPSec
> PathName : C:\WINDOWS\system32\DRIVERS\ipsec.sys
> Started : True
> StartMode : System
> State : Running
>
>ipsraidn
> DependOnSvc :
> DependOnGrp :
> Description : ipsraidn
> Name : ipsraidn
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>IR Enumerator Service
> DependOnSvc :
> DependOnGrp :
> Description : IR Enumerator Service
> Name : IRENUM
> PathName : C:\WINDOWS\system32\DRIVERS\irenum.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>PnP ISA/EISA Bus Driver
> DependOnSvc :
> DependOnGrp :
> Description : PnP ISA/EISA Bus Driver
> Name : isapnp
> PathName : C:\WINDOWS\system32\DRIVERS\isapnp.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Keyboard Class Driver
> DependOnSvc :
> DependOnGrp :
> Description : Keyboard Class Driver
> Name : Kbdclass
> PathName : C:\WINDOWS\system32\DRIVERS\kbdclass.sys
> Started : True
> StartMode : System
> State : Running
>
>KSecDD
> DependOnSvc :
> DependOnGrp :
> Description : KSecDD
> Name : KSecDD
> PathName : C:\WINDOWS\system32\drivers\KSecDD.sys
> Started : True
> StartMode : Boot
> State : Running
>
>lp6nds35
> DependOnSvc :
> DependOnGrp :
> Description : lp6nds35
> Name : lp6nds35
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>mnmdd
> DependOnSvc :
> DependOnGrp :
> Description : mnmdd
> Name : mnmdd
> PathName : C:\WINDOWS\system32\drivers\mnmdd.sys
> Started : True
> StartMode : System
> State : Running
>
>Modem
> DependOnSvc :
> DependOnGrp :
> Description : Modem
> Name : Modem
> PathName : C:\WINDOWS\system32\drivers\Modem.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>Mouse Class Driver
> DependOnSvc :
> DependOnGrp :
> Description : Mouse Class Driver
> Name : Mouclass
> PathName : C:\WINDOWS\system32\DRIVERS\mouclass.sys
> Started : True
> StartMode : System
> State : Running
>
>Mount Point Manager
> DependOnSvc :
> DependOnGrp :
> Description : Mount Point Manager
> Name : MountMgr
> PathName : C:\WINDOWS\system32\drivers\MountMgr.sys
> Started : True
> StartMode : Boot
> State : Running
>
>mraid35x
> DependOnSvc :
> DependOnGrp :
> Description : mraid35x
> Name : mraid35x
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>WebDav Client Redirector
> DependOnSvc :
> DependOnGrp :
> Description : WebDav Client Redirector
> Name : MRxDAV
> PathName : C:\WINDOWS\system32\DRIVERS\mrxdav.sys
> Started : True
> StartMode : Manual
> State : Running
>
>MRXSMB
> DependOnSvc :
> DependOnGrp :
> Description : MRXSMB
> Name : MRxSmb
> PathName : C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
> Started : True
> StartMode : System
> State : Running
>
>Msfs
> DependOnSvc :
> DependOnGrp :
> Description : Msfs
> Name : Msfs
> PathName : C:\WINDOWS\system32\drivers\Msfs.sys
> Started : True
> StartMode : System
> State : Running
>
>ISA Server Packet Filter Extension Driver
> DependOnSvc : IpFilterDriver
> DependOnGrp :
> Description : ISA Server Packet Filter Extension Driver
> Name : MspFltEx
> PathName : \??\C:\WINDOWS\system32\drivers\mspfltex.sys
> Started : True
> StartMode : Auto
> State : Running
>
>ISA Server Network Address Translation (NAT) Driver
> DependOnSvc : IpFilterDriver ipnat
> DependOnGrp :
> Description : ISA Server Network Address Translation (NAT) Driver
> Name : MspNAT
> PathName : \??\C:\WINDOWS\system32\drivers\mspnat.sys
> Started : True
> StartMode : Auto
> State : Running
>
>Mup
> DependOnSvc :
> DependOnGrp :
> Description : Mup
> Name : Mup
> PathName : C:\WINDOWS\system32\drivers\Mup.sys
> Started : True
> StartMode : Boot
> State : Running
>
>NAVENG
> DependOnSvc :
> DependOnGrp :
> Description : NAVENG
> Name : NAVENG
> PathName :
>\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\200505 04.016\naveng.sys
> Started : True
> StartMode : Manual
> State : Running
>
>NAVEX15
> DependOnSvc :
> DependOnGrp :
> Description : NAVEX15
> Name : NAVEX15
> PathName :
>\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\200505 04.016\navex15.sys
> Started : True
> StartMode : Manual
> State : Running
>
>NDIS System Driver
> DependOnSvc :
> DependOnGrp :
> Description : NDIS System Driver
> Name : NDIS
> PathName : C:\WINDOWS\system32\drivers\NDIS.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Remote Access NDIS TAPI Driver
> DependOnSvc :
> DependOnGrp :
> Description : Remote Access NDIS TAPI Driver
> Name : NdisTapi
> PathName : C:\WINDOWS\system32\DRIVERS\ndistapi.sys
> Started : True
> StartMode : Manual
> State : Running
>
>NDIS Usermode I/O Protocol
> DependOnSvc :
> DependOnGrp :
> Description : NDIS Usermode I/O Protocol
> Name : Ndisuio
> PathName : C:\WINDOWS\system32\DRIVERS\ndisuio.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>Remote Access NDIS WAN Driver
> DependOnSvc :
> DependOnGrp :
> Description : Remote Access NDIS WAN Driver
> Name : NdisWan
> PathName : C:\WINDOWS\system32\DRIVERS\ndiswan.sys
> Started : True
> StartMode : Manual
> State : Running
>
>NDIS Proxy
> DependOnSvc :
> DependOnGrp :
> Description : NDIS Proxy
> Name : NDProxy
> PathName : C:\WINDOWS\system32\drivers\NDProxy.sys
> Started : True
> StartMode : Manual
> State : Running
>
>NetBIOS Interface
> DependOnSvc :
> DependOnGrp :
> Description : NetBIOS Interface
> Name : NetBIOS
> PathName : C:\WINDOWS\system32\DRIVERS\netbios.sys
> Started : True
> StartMode : System
> State : Running
>
>NetBios over Tcpip
> DependOnSvc : Tcpip
> DependOnGrp :
> Description : NetBios over Tcpip
> Name : NetBT
> PathName : C:\WINDOWS\system32\DRIVERS\netbt.sys
> Started : True
> StartMode : System
> State : Running
>
>nfrd960
> DependOnSvc :
> DependOnGrp :
> Description : nfrd960
> Name : nfrd960
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Npfs
> DependOnSvc :
> DependOnGrp :
> Description : Npfs
> Name : Npfs
> PathName : C:\WINDOWS\system32\drivers\Npfs.sys
> Started : True
> StartMode : System
> State : Running
>
>Ntfs
> DependOnSvc :
> DependOnGrp :
> Description : Ntfs
> Name : Ntfs
> PathName : C:\WINDOWS\system32\drivers\Ntfs.sys
> Started : True
> StartMode : Disabled
> State : Running
>
>Null
> DependOnSvc :
> DependOnGrp :
> Description : Null
> Name : Null
> PathName : C:\WINDOWS\system32\drivers\Null.sys
> Started : True
> StartMode : System
> State : Running
>
>Parallel port driver
> DependOnSvc :
> DependOnGrp :
> Description : Parallel port driver
> Name : Parport
> PathName : C:\WINDOWS\system32\DRIVERS\parport.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Partition Manager
> DependOnSvc :
> DependOnGrp :
> Description : Partition Manager
> Name : PartMgr
> PathName : C:\WINDOWS\system32\drivers\PartMgr.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Parvdm
> DependOnSvc : Parport
> DependOnGrp : Parallel arbitrator
> Description : Parvdm
> Name : Parvdm
> PathName : C:\WINDOWS\system32\DRIVERS\parvdm.sys
> Started : True
> StartMode : Auto
> State : Running
>
>PCI Bus Driver
> DependOnSvc :
> DependOnGrp :
> Description : PCI Bus Driver
> Name : PCI
> PathName : C:\WINDOWS\system32\DRIVERS\pci.sys
> Started : True
> StartMode : Boot
> State : Running
>
>PCIIde
> DependOnSvc :
> DependOnGrp :
> Description : PCIIde
> Name : PCIIde
> PathName : C:\WINDOWS\system32\DRIVERS\pciide.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Pcmcia
> DependOnSvc :
> DependOnGrp :
> Description : Pcmcia
> Name : Pcmcia
> PathName : C:\WINDOWS\system32\drivers\Pcmcia.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>PDCOMP
> DependOnSvc :
> DependOnGrp :
> Description : PDCOMP
> Name : PDCOMP
> PathName :
> Started : False
> StartMode : Manual
> State : Stopped
>
>PDFRAME
> DependOnSvc :
> DependOnGrp :
> Description : PDFRAME
> Name : PDFRAME
> PathName :
> Started : False
> StartMode : Manual
> State : Stopped
>
>PDRELI
> DependOnSvc :
> DependOnGrp :
> Description : PDRELI
> Name : PDRELI
> PathName :
> Started : False
> StartMode : Manual
> State : Stopped
>
>PDRFRAME
> DependOnSvc :
> DependOnGrp :
> Description : PDRFRAME
> Name : PDRFRAME
> PathName :
> Started : False
> StartMode : Manual
> State : Stopped
>
>perc2
> DependOnSvc :
> DependOnGrp :
> Description : perc2
> Name : perc2
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>perc2hib
> DependOnSvc :
> DependOnGrp :
> Description : perc2hib
> Name : perc2hib
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>WAN Miniport (PPTP)
> DependOnSvc :
> DependOnGrp :
> Description : WAN Miniport (PPTP)
> Name : PptpMiniport
> PathName : C:\WINDOWS\system32\DRIVERS\raspptp.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Processor Driver
> DependOnSvc :
> DependOnGrp :
> Description : Processor Driver
> Name : Processor
> PathName : C:\WINDOWS\system32\DRIVERS\processr.sys
> Started : True
> StartMode : Manual
> State : Running
>
>QoS Packet Scheduler
> DependOnSvc : Gpc
> DependOnGrp :
> Description : QoS Packet Scheduler
> Name : PSched
> PathName : C:\WINDOWS\system32\DRIVERS\psched.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Direct Parallel Link Driver
> DependOnSvc :
> DependOnGrp :
> Description : Direct Parallel Link Driver
> Name : Ptilink
> PathName : C:\WINDOWS\system32\DRIVERS\ptilink.sys
> Started : True
> StartMode : Manual
> State : Running
>
>ql1080
> DependOnSvc :
> DependOnGrp :
> Description : ql1080
> Name : ql1080
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Ql10wnt
> DependOnSvc :
> DependOnGrp :
> Description : Ql10wnt
> Name : Ql10wnt
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql12160
> DependOnSvc :
> DependOnGrp :
> Description : ql12160
> Name : ql12160
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql1240
> DependOnSvc :
> DependOnGrp :
> Description : ql1240
> Name : ql1240
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql1280
> DependOnSvc :
> DependOnGrp :
> Description : ql1280
> Name : ql1280
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql2100
> DependOnSvc :
> DependOnGrp :
> Description : ql2100
> Name : ql2100
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql2200
> DependOnSvc :
> DependOnGrp :
> Description : ql2200
> Name : ql2200
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ql2300
> DependOnSvc :
> DependOnGrp :
> Description : ql2300
> Name : ql2300
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>QntmDLT
> DependOnSvc :
> DependOnGrp :
> Description : QntmDLT
> Name : QntmDLT
> PathName : C:\WINDOWS\system32\DRIVERS\QntmDLT.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Remote Access Auto Connection Driver
> DependOnSvc :
> DependOnGrp :
> Description : Remote Access Auto Connection Driver
> Name : RasAcd
> PathName : C:\WINDOWS\system32\DRIVERS\rasacd.sys
> Started : True
> StartMode : System
> State : Running
>
>WAN Miniport (L2TP)
> DependOnSvc :
> DependOnGrp :
> Description : WAN Miniport (L2TP)
> Name : Rasl2tp
> PathName : C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Remote Access PPPOE Driver
> DependOnSvc :
> DependOnGrp :
> Description : Remote Access PPPOE Driver
> Name : RasPppoe
> PathName : C:\WINDOWS\system32\DRIVERS\raspppoe.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Direct Parallel
> DependOnSvc :
> DependOnGrp :
> Description : Direct Parallel
> Name : Raspti
> PathName : C:\WINDOWS\system32\DRIVERS\raspti.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Rdbss
> DependOnSvc :
> DependOnGrp :
> Description : Rdbss
> Name : Rdbss
> PathName : C:\WINDOWS\system32\DRIVERS\rdbss.sys
> Started : True
> StartMode : System
> State : Running
>
>RDPCDD
> DependOnSvc :
> DependOnGrp :
> Description : RDPCDD
> Name : RDPCDD
> PathName : C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
> Started : True
> StartMode : System
> State : Running
>
>Terminal Server Device Redirector Driver
> DependOnSvc :
> DependOnGrp :
> Description : Terminal Server Device Redirector Driver
> Name : rdpdr
> PathName : C:\WINDOWS\system32\DRIVERS\rdpdr.sys
> Started : True
> StartMode : Manual
> State : Running
>
>RDPWD
> DependOnSvc :
> DependOnGrp :
> Description : RDPWD
> Name : RDPWD
> PathName : C:\WINDOWS\system32\drivers\RDPWD.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Digital CD Audio Playback Filter Driver
> DependOnSvc :
> DependOnGrp :
> Description : Digital CD Audio Playback Filter Driver
> Name : redbook
> PathName : C:\WINDOWS\system32\DRIVERS\redbook.sys
> Started : False
> StartMode : System
> State : Stopped
>
>SAVRT
> DependOnSvc : SAVRTPEL
> DependOnGrp :
> Description : SAVRT
> Name : SAVRT
> PathName : \??\C:\Program Files\Symantec AntiVirus\savrt.sys
> Started : True
> StartMode : System
> State : Running
>
>SAVRTPEL
> DependOnSvc :
> DependOnGrp :
> Description : SAVRTPEL
> Name : SAVRTPEL
> PathName : \??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys
> Started : True
> StartMode : Auto
> State : Running
>
>Secdrv
> DependOnSvc :
> DependOnGrp :
> Description : Secdrv
> Name : Secdrv
> PathName : C:\WINDOWS\system32\DRIVERS\secdrv.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>Serenum Filter Driver
> DependOnSvc :
> DependOnGrp :
> Description : Serenum Filter Driver
> Name : serenum
> PathName : C:\WINDOWS\system32\DRIVERS\serenum.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Serial port driver
> DependOnSvc :
> DependOnGrp :
> Description : Serial port driver
> Name : Serial
> PathName : C:\WINDOWS\system32\DRIVERS\serial.sys
> Started : True
> StartMode : System
> State : Running
>
>Sfloppy
> DependOnSvc :
> DependOnGrp : SCSI miniport
> Description : Sfloppy
> Name : Sfloppy
> PathName : C:\WINDOWS\system32\drivers\Sfloppy.sys
> Started : False
> StartMode : System
> State : Stopped
>
>SiI-3114 SATALink Controller
> DependOnSvc :
> DependOnGrp :
> Description : SiI-3114 SATALink Controller
> Name : si3114
> PathName : C:\WINDOWS\system32\drivers\si3114.sys
> Started : True
> StartMode : Boot
> State : Running
>
>SATALink driver accelerator
> DependOnSvc :
> DependOnGrp :
> Description : SATALink driver accelerator
> Name : SiFilter
> PathName : C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Simbad
> DependOnSvc :
> DependOnGrp :
> Description : Simbad
> Name : Simbad
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>SiWinAcc
> DependOnSvc :
> DependOnGrp :
> Description : SiWinAcc
> Name : SiWinAcc
> PathName : C:\WINDOWS\system32\drivers\SiWinAcc.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Sparrow
> DependOnSvc :
> DependOnGrp :
> Description : Sparrow
> Name : Sparrow
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Srv
> DependOnSvc :
> DependOnGrp :
> Description : Srv
> Name : Srv
> PathName : C:\WINDOWS\system32\DRIVERS\srv.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Software Bus Driver
> DependOnSvc :
> DependOnGrp :
> Description : Software Bus Driver
> Name : swenum
> PathName : C:\WINDOWS\system32\DRIVERS\swenum.sys
> Started : True
> StartMode : Manual
> State : Running
>
>symc810
> DependOnSvc :
> DependOnGrp :
> Description : symc810
> Name : symc810
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>symc8xx
> DependOnSvc :
> DependOnGrp :
> Description : symc8xx
> Name : symc8xx
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>SymEvent
> DependOnSvc :
> DependOnGrp :
> Description : SymEvent
> Name : SymEvent
> PathName : \??\C:\Program Files\Symantec\SYMEVENT.SYS
> Started : True
> StartMode : Manual
> State : Running
>
>symmpi
> DependOnSvc :
> DependOnGrp :
> Description : symmpi
> Name : symmpi
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>sym_hi
> DependOnSvc :
> DependOnGrp :
> Description : sym_hi
> Name : sym_hi
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>sym_u3
> DependOnSvc :
> DependOnGrp :
> Description : sym_u3
> Name : sym_u3
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>TCP/IP Protocol Driver
> DependOnSvc : IPSec
> DependOnGrp :
> Description : TCP/IP Protocol Driver
> Name : Tcpip
> PathName : C:\WINDOWS\system32\DRIVERS\tcpip.sys
> Started : True
> StartMode : System
> State : Running
>
>TDPIPE
> DependOnSvc :
> DependOnGrp :
> Description : TDPIPE
> Name : TDPIPE
> PathName : C:\WINDOWS\system32\drivers\TDPIPE.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>TDTCP
> DependOnSvc :
> DependOnGrp :
> Description : TDTCP
> Name : TDTCP
> PathName : C:\WINDOWS\system32\drivers\TDTCP.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Terminal Device Driver
> DependOnSvc :
> DependOnGrp :
> Description : Terminal Device Driver
> Name : TermDD
> PathName : C:\WINDOWS\system32\DRIVERS\termdd.sys
> Started : True
> StartMode : System
> State : Running
>
>TosIde
> DependOnSvc :
> DependOnGrp :
> Description : TosIde
> Name : TosIde
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Udfs
> DependOnSvc :
> DependOnGrp :
> Description : Udfs
> Name : Udfs
> PathName : C:\WINDOWS\system32\drivers\Udfs.sys
> Started : False
> StartMode : Disabled
> State : Stopped
>
>ultra
> DependOnSvc :
> DependOnGrp :
> Description : ultra
> Name : ultra
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Microcode Update Driver
> DependOnSvc :
> DependOnGrp :
> Description : Microcode Update Driver
> Name : Update
> PathName : C:\WINDOWS\system32\DRIVERS\update.sys
> Started : True
> StartMode : Manual
> State : Running
>
>USB2 Enabled Hub
> DependOnSvc :
> DependOnGrp :
> Description : USB2 Enabled Hub
> Name : usbhub
> PathName : C:\WINDOWS\system32\DRIVERS\usbhub.sys
> Started : True
> StartMode : Manual
> State : Running
>
>Microsoft USB Open Host Controller Miniport Driver
> DependOnSvc :
> DependOnGrp :
> Description : Microsoft USB Open Host Controller Miniport Driver
> Name : usbohci
> PathName : C:\WINDOWS\system32\DRIVERS\usbohci.sys
> Started : True
> StartMode : Manual
> State : Running
>
>USB Mass Storage Driver
> DependOnSvc :
> DependOnGrp :
> Description : USB Mass Storage Driver
> Name : usbstor
> PathName : C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
> Started : True
> StartMode : Manual
> State : Running
>
>VGA Display Controller.
> DependOnSvc :
> DependOnGrp :
> Description : VGA Display Controller.
> Name : VgaSave
> PathName : C:\WINDOWS\system32\drivers\vga.sys
> Started : True
> StartMode : System
> State : Running
>
>ViaIde
> DependOnSvc :
> DependOnGrp :
> Description : ViaIde
> Name : ViaIde
> PathName :
> Started : False
> StartMode : Disabled
> State : Stopped
>
>Storage volumes
> DependOnSvc :
> DependOnGrp :
> Description : Storage volumes
> Name : VolSnap
> PathName : C:\WINDOWS\system32\DRIVERS\volsnap.sys
> Started : True
> StartMode : Boot
> State : Running
>
>Remote Access IP ARP Driver
> DependOnSvc :
> DependOnGrp :
> Description : Remote Access IP ARP Driver
> Name : Wanarp
> PathName : C:\WINDOWS\system32\DRIVERS\wanarp.sys
> Started : True
> StartMode : Manual
> State : Running
>
>WDICA
> DependOnSvc :
> DependOnGrp :
> Description : WDICA
> Name : WDICA
> PathName :
> Started : False
> StartMode : Manual
> State : Stopped
>
>Network Load Balancing
> DependOnSvc :
> DependOnGrp :
> Description : Network Load Balancing
> Name : WLBS
> PathName : C:\WINDOWS\system32\DRIVERS\wlbs.sys
> Started : False
> StartMode : Manual
> State : Stopped
>
>** Services
>Alerter
> DependOnSvc : LanmanWorkstation
> DependOnGrp :
> Description : Notifies selected users and computers of administrative
>alerts. If the service is stopped, programs that use administrative alerts
>will not receive them. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : Alerter
> PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
> ProcessId : 0
> StartMode : Disabled
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Application Layer Gateway Service
> DependOnSvc :
> DependOnGrp :
> Description : Provides support for application level protocol plug-ins and
>enables network/protocol connectivity. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : ALG
> PathName : C:\WINDOWS\System32\alg.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Application Management
> DependOnSvc :
> DependOnGrp :
> Description : Processes installation, removal, and enumeration requests
>for Active Directory IntelliMirror group policy programs. If the service is
>disabled, users will be unable to install, remove, or enumerate any
>IntelliMirror programs. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : AppMgmt
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>ASP.NET State Service
> DependOnSvc :
> DependOnGrp :
> Description : Provides support for out-of-process session states for
>ASP.NET. If this service is stopped, out-of-process requests will not be
>processed. If this service is disabled, any services that explicitly depend
>on it will fail to start.
> Name : aspnet_state
> PathName :
>C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspn et_state.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\NetworkService
> State : Stopped
>
>Windows Audio
> DependOnSvc : PlugPlay RpcSs
> DependOnGrp :
> Description : Manages audio devices for Windows-based programs. If this
>service is stopped, audio devices and effects will not function properly. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : AudioSrv
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Background Intelligent Transfer Service
> DependOnSvc : Rpcss EventSystem
> DependOnGrp :
> Description : Transfers data between clients and servers in the
>background. If BITS is disabled, features such as Windows Update will not
>work correctly.
> Name : BITS
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Computer Browser
> DependOnSvc : LanmanWorkstation LanmanServer
> DependOnGrp :
> Description : Maintains an updated list of computers on the network and
>supplies this list to computers designated as browsers. If this service is
>stopped, this list will not be updated or maintained. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : Browser
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Indexing Service
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Indexes contents and properties of files on local and remote
>computers; provides rapid access to files through flexible querying
>language.
> Name : CiSvc
> PathName : C:\WINDOWS\system32\cisvc.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>ClipBook
> DependOnSvc : NetDDE
> DependOnGrp :
> Description : Enables ClipBook Viewer to store information and share it
>with remote computers. If the service is stopped, ClipBook Viewer will not
>be able to share information with remote computers. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : ClipSrv
> PathName : C:\WINDOWS\system32\clipsrv.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>COM+ System Application
> DependOnSvc : rpcss eventsystem
> DependOnGrp :
> Description : Manages the configuration and tracking of Component Object
>Model (COM)+-based components. If the service is stopped, most COM+-based
>components will not function properly. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : COMSysApp
> PathName : C:\WINDOWS\system32\dllhost.exe
>/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
> ProcessId : 5284
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Cryptographic Services
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Provides three management services: Catalog Database
>Service, which confirms the signatures of Windows files; Protected Root
>Service, which adds and removes Trusted Root Certification Authority
>certificates from this computer; and Key Service, which helps enroll this
>computer for certificates. If this service is stopped, these management
>services will not function properly. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : CryptSvc
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Symantec AntiVirus Definition Watcher
> DependOnSvc :
> DependOnGrp :
> Description : Monitors and maintains virus definitions.
> Name : DefWatch
> PathName : "C:\Program Files\Symantec AntiVirus\DefWatch.exe"
> ProcessId : 148
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Distributed File System
> DependOnSvc : LanmanWorkstation LanmanServer DfsDriver Mup SamSS
> DependOnGrp :
> Description : Integrates disparate file shares into a single, logical
>namespace and manages these logical volumes distributed across a local or
>wide area network. If this service is stopped, users will be unable to
>access file shares. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : Dfs
> PathName : C:\WINDOWS\system32\Dfssvc.exe
> ProcessId : 188
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>DHCP Client
> DependOnSvc : Tcpip Afd
> DependOnGrp :
> Description : Registers and updates IP addresses and DNS records for this
>computer. If this service is stopped, this computer will not receive dynamic
>IP addresses and DNS updates. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : Dhcp
> PathName : C:\WINDOWS\system32\svchost.exe -k NetworkService
> ProcessId : 1356
> StartMode : Auto
> StartName : NT AUTHORITY\NetworkService
> State : Running
>
>DHCP Server
> DependOnSvc : RpcSs Tcpip SamSs EventLog EventSystem
> DependOnGrp :
> Description : Performs TCP/IP configuration for DHCP clients, including
>dynamic assignments of IP addresses, specification of the WINS and DNS
>servers, and connection-specific DNS names. If this service is stopped, the
>DHCP server will not perform TCP/IP configuration for clients. If this
>service is disabled, any services that explicitly depend on it will fail to
>start.
> Name : DHCPServer
> PathName : C:\WINDOWS\system32\tcpsvcs.exe
> ProcessId : 3316
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Logical Disk Manager Administrative Service
> DependOnSvc : RpcSs PlugPlay DmServer
> DependOnGrp :
> Description : Configures hard disk drives and volumes. The service only
>runs for configuration processes and then stops.
> Name : dmadmin
> PathName : C:\WINDOWS\System32\dmadmin.exe /com
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Logical Disk Manager
> DependOnSvc : RpcSs PlugPlay
> DependOnGrp :
> Description : Detects and monitors new hard disk drives and sends disk
>volume information to Logical Disk Manager Administrative Service for
>configuration. If this service is stopped, dynamic disk status and
>configuration information may become out of date. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : dmserver
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>DNS Server
> DependOnSvc : Tcpip Afd RpcSs
> DependOnGrp :
> Description : Enables DNS clients to resolve DNS names by answering DNS
>queries and dynamic DNS update requests. If this service is stopped, DNS
>updates will not occur. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : DNS
> PathName : C:\WINDOWS\System32\dns.exe
> ProcessId : 256
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>DNS Client
> DependOnSvc : Tcpip
> DependOnGrp :
> Description : Resolves and caches Domain Name System (DNS) names for this
>computer. If this service is stopped, this computer will not be able to
>resolve DNS names and locate Active Directory domain controllers. If this
>service is disabled, any services that explicitly depend on it will fail to
>start.
> Name : Dnscache
> PathName : C:\WINDOWS\system32\svchost.exe -k NetworkService
> ProcessId : 1356
> StartMode : Auto
> StartName : NT AUTHORITY\NetworkService
> State : Running
>
>Error Reporting Service
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Collects, stores, and reports unexpected application crashes
>to Microsoft. If this service is stopped, then Error Reporting will occur
>only for kernel faults and some types of user mode faults. If this service
>is disabled, any services that explicitly depend on it will not start.
> Name : ERSvc
> PathName : C:\WINDOWS\System32\svchost.exe -k WinErr
> ProcessId : 304
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Event Log
> DependOnSvc :
> DependOnGrp :
> Description : Enables event log messages issued by Windows-based programs
>and components to be viewed in Event Viewer. This service cannot be stopped.
> Name : Eventlog
> PathName : C:\WINDOWS\system32\services.exe
> ProcessId : 932
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>COM+ Event System
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Supports System Event Notification Service (SENS), which
>provides automatic distribution of events to subscribing Component Object
>Model (COM) components. If the service is stopped, SENS will close and will
>not be able to provide logon and logoff notifications. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : EventSystem
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Fax
> DependOnSvc : TapiSrv RpcSs PlugPlay Spooler
> DependOnGrp :
> Description : Enables you to send and receive faxes, utilizing fax
>resources available on this computer or on the network.
> Name : Fax
> PathName : C:\WINDOWS\system32\fxssvc.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\NetworkService
> State : Stopped
>
>FLEXlm Service 1
> DependOnSvc :
> DependOnGrp : NetworkProvider
> Description :
> Name : FLEXlm Service 1
> PathName : C:\Program Files\flexlm\v8.3\i86_n3\lmgrd.exe
> ProcessId : 464
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Firewall
> DependOnSvc : MspFltEx MspNAT isactrl
> DependOnGrp :
> Description : Provides firewall protection to Firewall and SecureNAT
>clients
> Name : Fwsrv
> PathName : C:\Program Files\Microsoft ISA Server\wspsrv.exe
> ProcessId : 6668
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft H.323 Gatekeeper
> DependOnSvc :
> DependOnGrp :
> Description : Supports communications for H.323 Gatekeeper-compliant
>applications
> Name : GKSVC
> PathName : svchost.exe -k iptelsvcs
> ProcessId : 496
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Help and Support
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Enables Help and Support Center to run on this computer. If
>this service is stopped, Help and Support Center will be unavailable. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : helpsvc
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Human Interface Device Access
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Enables generic input access to Human Interface Devices
>(HID), which activates and maintains the use of predefined hot buttons on
>keyboards, remote controls, and other multimedia devices. If this service is
>stopped, hot buttons controlled by this service will no longer function. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : HidServ
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>HTTP SSL
> DependOnSvc : HTTP IISADMIN
> DependOnGrp :
> Description : This service implements the secure hypertext transfer
>protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL).
>If this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : HTTPFilter
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>IIS Admin Service
> DependOnSvc : RPCSS SamSS
> DependOnGrp :
> Description : Enables this server to administer Web and FTP services. If
>this service is stopped, the server will be unable to run Web, FTP, NNTP, or
>SMTP sites or configure IIS. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : IISADMIN
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 572
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Exchange IMAP4
> DependOnSvc : IISAdmin
> DependOnGrp :
> Description : Provides Internet Message Access Protocol (IMAP4) Services
>to clients. If this service is stopped, clients are unable to connect to
>this computer using the IMAP4 protocol.
> Name : IMAP4Svc
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>IMAPI CD-Burning COM Service
> DependOnSvc :
> DependOnGrp :
> Description : Manages CD recording using Image Mastering Applications
>Programming Interface (IMAPI). If this service is stopped, this computer
>will be unable to record CDs. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : ImapiService
> PathName : C:\WINDOWS\system32\imapi.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Intel PDS
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : Intel PDS
> PathName : C:\WINDOWS\system32\CBA\pds.exe
> ProcessId : 628
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft ISA Server Control
> DependOnSvc : RasMan MspFltEx
> DependOnGrp :
> Description : Controls ISA Server services
> Name : isactrl
> PathName : C:\Program Files\Microsoft ISA Server\mspadmin.exe
> ProcessId : 392
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Intersite Messaging
> DependOnSvc : SamSS
> DependOnGrp :
> Description : Enables messages to be exchanged between computers running
>Windows Server sites. If this service is stopped, messages will not be
>exchanged, nor will site routing information be calculated for other
>services. If this service is disabled, any services that explicitly depend
>on it will fail to start.
> Name : IsmServ
> PathName : C:\WINDOWS\System32\ismserv.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Kerberos Key Distribution Center
> DependOnSvc : RpcSs Afd
> DependOnGrp :
> Description : On domain controllers this service enables users to log on
>to the network using the Kerberos authentication protocol. If this service
>is stopped on a domain controller, users will be unable to log on to the
>network. If this service is disabled, any services that explicitly depend on
>it will fail to start.
> Name : kdc
> PathName : C:\WINDOWS\System32\lsass.exe
> ProcessId : 944
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Server
> DependOnSvc :
> DependOnGrp :
> Description : Supports file, print, and named-pipe sharing over the
>network for this computer. If this service is stopped, these functions will
>be unavailable. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : lanmanserver
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Workstation
> DependOnSvc :
> DependOnGrp :
> Description : Creates and maintains client network connections to remote
>servers. If this service is stopped, these connections will be unavailable.
>If this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : lanmanworkstation
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>License Logging
> DependOnSvc :
> DependOnGrp :
> Description : Monitors and records client access licensing for portions of
>the operating system (such as IIS, Terminal Server and File/Print) as well
>as products that aren't a part of the OS, like SQL and Exchange Server. If
>this service is stopped, licensing will be enforced, but will not be
>monitored.
> Name : LicenseService
> PathName : C:\WINDOWS\System32\llssrv.exe
> ProcessId : 716
> StartMode : Auto
> StartName : NT AUTHORITY\NetworkService
> State : Running
>
>TCP/IP NetBIOS Helper
> DependOnSvc : NetBT Afd
> DependOnGrp :
> Description : Provides support for the NetBIOS over TCP/IP (NetBT) service
>and NetBIOS name resolution for clients on the network, therefore enabling
>users to share files, print, and log on to the network. If this service is
>stopped, these functions might be unavailable. If this service is disabled,
>any services that explicitly depend on it will fail to start.
> Name : LmHosts
> PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
> ProcessId : 1388
> StartMode : Auto
> StartName : NT AUTHORITY\LocalService
> State : Running
>
>Messenger
> DependOnSvc : LanmanWorkstation NetBIOS PlugPlay RpcSS
> DependOnGrp :
> Description : Transmits net send and Alerter service messages between
>clients and servers. This service is not related to Windows Messenger. If
>this service is stopped, Alerter messages will not be transmitted. If this
>service is disabled, any services that explicitly depend on it will fail to
>start.
> Name : Messenger
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>NetMeeting Remote Desktop Sharing
> DependOnSvc :
> DependOnGrp :
> Description : Enables an authorized user to access this computer remotely
>by using NetMeeting over a corporate intranet. If this service is stopped,
>remote desktop sharing will be unavailable. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : mnmsrvc
> PathName : C:\WINDOWS\system32\mnmsrvc.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Distributed Transaction Coordinator
> DependOnSvc : RPCSS SamSS
> DependOnGrp :
> Description : Coordinates transactions that span multiple resource
>managers, such as databases, message queues, and file systems. If this
>service is stopped, these transactions will not occur. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : MSDTC
> PathName : C:\WINDOWS\system32\msdtc.exe
> ProcessId : 1904
> StartMode : Auto
> StartName : NT AUTHORITY\NetworkService
> State : Running
>
>Microsoft Exchange Event
> DependOnSvc : MSExchangeIS
> DependOnGrp :
> Description : Monitors folders and fires events, for Exchange
>5.5-compatible server applications.
> Name : MSExchangeES
> PathName : "C:\Program Files\Exchsrvr\bin\events.exe"
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Microsoft Exchange Information Store
> DependOnSvc : EXIFS MSExchangeSA
> DependOnGrp :
> Description : Manages the Microsoft Exchange Information Store. This
>includes mailbox stores and public folder stores. If this service is
>stopped, mailbox stores and public folder stores on this computer are
>unavailable. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : MSExchangeIS
> PathName : "C:\Program Files\Exchsrvr\bin\store.exe"
> ProcessId : 4780
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Exchange Management
> DependOnSvc : WinMgmt RPCSS
> DependOnGrp :
> Description : Provides Exchange management information using Windows
>Management Instrumentation (WMI). If this service is stopped, Exchange
>management information is unavailable using WMI.
> Name : MSExchangeMGMT
> PathName : "C:\Program Files\Exchsrvr\bin\exmgmt.exe"
> ProcessId : 3384
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Exchange MTA Stacks
> DependOnSvc : MSExchangeSA
> DependOnGrp :
> Description : Provides Microsoft Exchange X.400 services. Exchange X.400
>services are used for connecting to Exchange 5.5 servers, and by other
>connectors (custom gateways). If this service is stopped, Exchange X.400
>services are unavailable.
> Name : MSExchangeMTA
> PathName : "C:\Program Files\Exchsrvr\bin\emsmta.exe"
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Microsoft Exchange System Attendant
> DependOnSvc : EventLog NtLmSsp RPCSS LanmanWorkstation LanmanServer
> DependOnGrp :
> Description : Provides monitoring, maintenance, and Active Directory
>lookup services, for example, monitoring of services and connectors,
>defragmenting the Exchange store, and forwarding Active Directory lookups to
>a Global Catalog server. If this service is stopped, monitoring,
>maintenance, and lookup services are unavailable. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : MSExchangeSA
> PathName : "C:\Program Files\Exchsrvr\bin\mad.exe"
> ProcessId : 3436
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Exchange Site Replication Service
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSExchangeSRS
> PathName : "C:\Program Files\Exchsrvr\bin\srsmain.exe"
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Windows Installer
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Adds, modifies, and removes applications provided as a
>Windows Installer (*.msi) package. If this service is disabled, any services
>that explicitly depend on it will fail to start.
> Name : MSIServer
> PathName : C:\WINDOWS\system32\msiexec.exe /V
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Microsoft Connector for POP3 Mailboxes
> DependOnSvc : MSExchangeIS
> DependOnGrp :
> Description : Enables Microsoft Exchange Server to retrieve mail from
>independent service providers and then have it routed to local mailboxes.
> Name : MSPOP3Connector
> PathName : C:\Program Files\Microsoft Windows Small Business
>Server\Networking\POP3\imbservice.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Microsoft Search
> DependOnSvc : RPCSS NTLMSSP
> DependOnGrp :
> Description : Creates full-text indexes on content and properties of
>structured and semi-structured data to allow fast linguistic searches on
>this data
> Name : MSSEARCH
> PathName : "C:\Program Files\Common
>Files\System\MSSearch\Bin\mssearch.exe"
> ProcessId : 3600
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>MSSQL$GTCSQL
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSSQL$GTCSQL
> PathName : C:\PROGRA~1\MICROS~3\MSSQL$~4\binn\sqlservr.exe -sGTCSQL
> ProcessId : 324
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>MSSQL$SBSMONITORING
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSSQL$SBSMONITORING
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL$SBSMONITORING\Binn\sqlservr.exe -sSBSMONITORING
> ProcessId : 996
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>MSSQL$SHAREPOINT
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSSQL$SHAREPOINT
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL$SHAREPOINT\Binn\sqlservr.exe -sSHAREPOINT
> ProcessId : 1344
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>MSSQLSERVER
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSSQLSERVER
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL\Binn\sqlservr.exe -sMSSQLSERVER
> ProcessId : 1560
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>MSSQLServerADHelper
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : MSSQLServerADHelper
> PathName : C:\Program Files\Microsoft SQL
>Server\80\Tools\Binn\sqladhlp.exe
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Network DDE
> DependOnSvc : NetDDEDSDM
> DependOnGrp :
> Description : Provides network transport and security for Dynamic Data
>Exchange (DDE) for programs running on the same computer or on different
>computers. If this service is stopped, DDE transport and security will be
>unavailable. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : NetDDE
> PathName : C:\WINDOWS\system32\netdde.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Network DDE DSDM
> DependOnSvc :
> DependOnGrp :
> Description : Manages Dynamic Data Exchange (DDE) network shares. If this
>service is stopped, DDE network shares will be unavailable. If this service
>is disabled, any services that explicitly depend on it will fail to start.
> Name : NetDDEdsdm
> PathName : C:\WINDOWS\system32\netdde.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Net Logon
> DependOnSvc : LanmanWorkstation LanmanServer
> DependOnGrp :
> Description : Maintains a secure channel between this computer and the
>domain controller for authenticating users and services. If this service is
>stopped, the computer may not authenticate users and services and the domain
>controller cannot register DNS records. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : Netlogon
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Network Connections
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Manages objects in the Network and Dial-Up Connections
>folder, in which you can view both local area network and remote
>connections. If this service is disabled, you will not be able to view local
>area network and remote connections and any services that explicitly depend
>on it will fail to start.
> Name : Netman
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Network Location Awareness (NLA)
> DependOnSvc : Tcpip Afd
> DependOnGrp :
> Description : Collects and stores network configuration and location
>information, and notifies applications when this information changes.
> Name : Nla
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Network News Transfer Protocol (NNTP)
> DependOnSvc : IISADMIN Eventlog
> DependOnGrp :
> Description : Transports network news across the network
> Name : NntpSvc
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Symantec System Center Discovery Service
> DependOnSvc : RPCSS
> DependOnGrp :
> Description :
> Name : NSCTOP
> PathName : C:\PROGRA~1\Symantec\SYMANT~1\NSCTOP.EXE
> ProcessId : 1784
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>File Replication Service
> DependOnSvc : EventLog RpcSs EventSystem
> DependOnGrp :
> Description : Allows files to be automatically copied and maintained
>simultaneously on multiple servers. If this service is stopped, file
>replication will not occur and servers will not synchronize. If this service
>is disabled, any services that explicitly depend on it will fail to start.
> Name : NtFrs
> PathName : C:\WINDOWS\system32\ntfrs.exe
> ProcessId : 2196
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>NT LM Security Support Provider
> DependOnSvc :
> DependOnGrp :
> Description : Provides security to remote procedure call (RPC) programs
>that use transports other than named pipes.
> Name : NtLmSsp
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Removable Storage
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Manages and catalogs removable media and operates automated
>removable media devices. If this service is stopped, programs that are
>dependent on Removable Storage, such as Backup and Remote Storage, will
>operate more slowly. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : NtmsSvc
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Plug and Play
> DependOnSvc :
> DependOnGrp :
> Description : Enables a computer to recognize and adapt to hardware
>changes with little or no user input. Stopping or disabling this service
>will result in system instability.
> Name : PlugPlay
> PathName : C:\WINDOWS\system32\services.exe
> ProcessId : 932
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>IPSEC Services
> DependOnSvc : RPCSS Tcpip IPSec
> DependOnGrp :
> Description : Provides end-to-end security between clients and servers on
>TCP/IP networks. If this service is stopped, TCP/IP security between clients
>and servers on the network will be impaired. If this service is disabled,
>any services that explicitly depend on it will fail to start.
> Name : PolicyAgent
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Exchange POP3
> DependOnSvc : IISAdmin
> DependOnGrp :
> Description : Provides Post Office Protocol version 3 (POP3) Services to
>clients. If this service is stopped, clients are unable to connect to this
>computer using the POP3 protocol.
> Name : POP3Svc
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Protected Storage
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Protects storage of sensitive information, such as private
>keys, and prevents access by unauthorized services, processes, or users. If
>this service is stopped, protected storage will be unavailable. If this
>service is disabled, any services that explicitly depend on it will fail to
>start.
> Name : ProtectedStorage
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Remote Access Auto Connection Manager
> DependOnSvc : RasMan Tapisrv
> DependOnGrp :
> Description : Detects unsuccessful attempts to connect to a remote network
>or computer and provides alternative methods for connection. If this service
>is stopped, users will need to manually connect. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : RasAuto
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Remote Access Connection Manager
> DependOnSvc : Tapisrv
> DependOnGrp :
> Description : Manages dial-up and virtual private network (VPN)
>connections from this computer to the Internet or other remote networks. If
>this service is stopped, the operating system might not function properly.
>If this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : RasMan
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Remote Desktop Help Session Manager
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Manages and controls Remote Assistance. If this service is
>stopped, Remote Assistance will be unavailable. Before stopping this
>service, see the Dependencies tab of the Properties dialog box.
> Name : RDSessMgr
> PathName : C:\WINDOWS\system32\sessmgr.exe
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Routing and Remote Access
> DependOnSvc : isactrl RpcSS
> DependOnGrp : NetBIOSGroup
> Description : Enables multi-protocol LAN-to-LAN, LAN-to-WAN, virtual
>private network (VPN), and network address translation (NAT) routing
>services for clients and servers on this network. If this service is
>stopped, these services will be unavailable. If this service is disabled,
>any services that explicitly depend on it will fail to start.
> Name : RemoteAccess
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Remote Registry
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Enables remote users to modify registry settings on this
>computer. If this service is stopped, the registry can be modified only by
>users on this computer. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : RemoteRegistry
> PathName : C:\WINDOWS\system32\svchost.exe -k regsvc
> ProcessId : 2396
> StartMode : Auto
> StartName : NT AUTHORITY\LocalService
> State : Running
>
>Microsoft Exchange Routing Engine
> DependOnSvc : IISAdmin
> DependOnGrp :
> Description : Provides topology and routing information to Exchange Server
>2003 servers. If this service is stopped, optimal routing of messages will
>not be available.
> Name : RESvc
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 572
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Remote Procedure Call (RPC) Locator
> DependOnSvc : LanmanWorkstation
> DependOnGrp :
> Description : Enables remote procedure call (RPC) clients using the RpcNs*
>family of APIs to locate RPC servers. If this service is stopped or
>disabled, RPC clients using RpcNs* APIs may be unable to locate servers or
>fail to start. RpcNs* APIs are not used internally in Windows.
> Name : RpcLocator
> PathName : C:\WINDOWS\system32\locator.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\NetworkService
> State : Stopped
>
>Remote Procedure Call (RPC)
> DependOnSvc :
> DependOnGrp :
> Description : Serves as the endpoint mapper and COM Service Control
>Manager. If this service is stopped or disabled, programs using COM or
>Remote Procedure Call (RPC) services will not function properly.
> Name : RpcSs
> PathName : C:\WINDOWS\system32\svchost -k rpcss
> ProcessId : 1136
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Resultant Set of Policy Provider
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Enables a user to connect to a remote computer, access the
>Windows Management Instrumentation database for that computer, and either
>verify the current Group Policy settings made for the computer or check
>settings before they are applied. If this service is stopped, remote
>verification will be unavailable. If this service is disabled, any services
>that explicitly depend on it will fail to start.
> Name : RSoPProv
> PathName : C:\WINDOWS\system32\RSoPProv.exe
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Special Administration Console Helper
> DependOnSvc :
> DependOnGrp :
> Description : Allows administrators to remotely access a command prompt
>using Emergency Management Services.
> Name : sacsvr
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Security Accounts Manager
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : The startup of this service signals other services that the
>Security Accounts Manager (SAM) is ready to accept requests. Disabling this
>service will prevent other services in the system from being notified when
>the SAM is ready, which may in turn cause those services to fail to start
>correctly. This service should not be disabled.
> Name : SamSs
> PathName : C:\WINDOWS\system32\lsass.exe
> ProcessId : 944
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>SBCore Service
> DependOnSvc : Error 5 accessing
>SYSTEM\CurrentControlSet\Services\SBCore\DependOn Service
> DependOnGrp : Error 5 accessing
>SYSTEM\CurrentControlSet\Services\SBCore\DependOn Group
> Description : Provides core server services.
> Name : SBCore
> PathName : C:\WINDOWS\System32\sbscrexe.exe
> ProcessId : 2416
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Smart Card
> DependOnSvc : PlugPlay
> DependOnGrp :
> Description : Manages access to smart cards read by this computer. If this
>service is stopped, this computer will be unable to read smart cards. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : SCardSvr
> PathName : C:\WINDOWS\System32\SCardSvr.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Task Scheduler
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Enables a user to configure and schedule automated tasks on
>this computer. If this service is stopped, these tasks will not be run at
>their scheduled times. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : Schedule
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Seapine License Server
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : SeapineLicenseSrv
> PathName : C:\Program Files\Seapine\License Server\Seapine License
>Server.exe
> ProcessId : 2456
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Secondary Logon
> DependOnSvc :
> DependOnGrp :
> Description : Enables starting processes under alternate credentials. If
>this service is stopped, this type of logon access will be unavailable. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : seclogon
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>System Event Notification
> DependOnSvc : EventSystem
> DependOnGrp :
> Description : Monitors system events and notifies subscribers to COM+
>Event System of these events. If this service is stopped, COM+ Event System
>subscribers will not receive system event notifications. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : SENS
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>SentinelLM
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : SentinelLM
> PathName : D:\Programmer\3dsl\sentlm72018\lservnt.exe
> ProcessId : 2760
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Shell Hardware Detection
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Provides notifications for AutoPlay hardware events.
> Name : ShellHWDetection
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Simple Mail Transfer Protocol (SMTP)
> DependOnSvc : IISADMIN Eventlog
> DependOnGrp :
> Description : Transports electronic mail across the network
> Name : SMTPSVC
> PathName : C:\WINDOWS\system32\inetsrv\inetinfo.exe
> ProcessId : 572
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>SPAMfighter
> DependOnSvc : MSExchangeIS
> DependOnGrp :
> Description :
> Name : SPAMfighter
> PathName : c:\program files\spamfighter\bin\spamfighter.exe
> ProcessId : 5544
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Print Spooler
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Manages all local and network print queues and controls all
>printing jobs. If this service is stopped, printing on the local machine
>will be unavailable. If this service is disabled, any services that
>explicitly depend on it will fail to start.
> Name : Spooler
> PathName : C:\WINDOWS\system32\spoolsv.exe
> ProcessId : 1832
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>SharePoint Timer Service
> DependOnSvc :
> DependOnGrp :
> Description : Sends notifications and performs scheduled tasks for Windows
>SharePoint Services
> Name : SPTimer
> PathName : C:\Program Files\Common Files\Microsoft Shared\Web Server
>Extensions\60\BIN\OWSTIMER.EXE
> ProcessId : 2828
> StartMode : Auto
> StartName : NT AUTHORITY\NETWORK SERVICE
> State : Running
>
>SQLAgent$GTCSQL
> DependOnSvc : MSSQL$GTCSQL
> DependOnGrp :
> Description :
> Name : SQLAgent$GTCSQL
> PathName : C:\PROGRA~1\MICROS~3\MSSQL$~4\binn\sqlagent.exe -i GTCSQL
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>SQLAgent$SBSMONITORING
> DependOnSvc : MSSQL$SBSMONITORING
> DependOnGrp :
> Description :
> Name : SQLAgent$SBSMONITORING
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL$SBSMONITORING\Binn\sqlagent.EXE -i SBSMONITORING
> ProcessId : 2868
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>SQLAgent$SHAREPOINT
> DependOnSvc : MSSQL$SHAREPOINT
> DependOnGrp :
> Description :
> Name : SQLAgent$SHAREPOINT
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL$SHAREPOINT\Binn\sqlagent.EXE -i SHAREPOINT
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>SQLSERVERAGENT
> DependOnSvc : MSSQLSERVER
> DependOnGrp :
> Description :
> Name : SQLSERVERAGENT
> PathName : C:\Program Files\Microsoft SQL
>Server\MSSQL\Binn\sqlagent.EXE -i MSSQLSERVER
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Windows Image Acquisition (WIA)
> DependOnSvc : RpcSs ShellHWDetection
> DependOnGrp :
> Description : Provides image acquisition services for scanners and
>cameras.
> Name : stisvc
> PathName : C:\WINDOWS\system32\svchost.exe -k imgsvc
> ProcessId : 0
> StartMode : Disabled
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Microsoft Software Shadow Copy Provider
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Manages software-based volume shadow copies taken by the
>Volume Shadow Copy service. If this service is stopped, software-based
>volume shadow copies cannot be managed. If this service is disabled, any
>services that explicitly depend on it will fail to start.
> Name : swprv
> PathName : C:\WINDOWS\System32\svchost.exe -k swprv
> ProcessId : 3808
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Symantec AntiVirus
> DependOnSvc :
> DependOnGrp :
> Description : Provides real-time virus scanning, reporting, and management
>functionality for Symantec AntiVirus.
> Name : Symantec AntiVirus
> PathName : "C:\Program Files\Symantec AntiVirus\Rtvscan.exe"
> ProcessId : 3100
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Performance Logs and Alerts
> DependOnSvc :
> DependOnGrp :
> Description : Collects performance data from local or remote computers
>based on preconfigured schedule parameters, then writes the data to a log or
>triggers an alert. If this service is stopped, performance information will
>not be collected. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : SysmonLog
> PathName : C:\WINDOWS\system32\smlogsvc.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT Authority\NetworkService
> State : Stopped
>
>Telephony
> DependOnSvc : PlugPlay RpcSs
> DependOnGrp :
> Description : Provides Telephony API (TAPI) support for clients using
>programs that control telephony devices and IP-based voice connections. If
>this service is stopped, the function of all dependent programs will be
>impaired. If this service is disabled, any services that explicitly depend
>on it will fail to start.
> Name : TapiSrv
> PathName : C:\WINDOWS\System32\svchost.exe -k tapisrv
> ProcessId : 3116
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Terminal Services
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Allows users to connect interactively to a remote computer.
>Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server
>depend on this service - stopping or disabling this service may make your
>computer unreliable. To prevent remote use of this computer, clear the
>checkboxes on the Remote tab of the System properties control panel item.
> Name : TermService
> PathName : C:\WINDOWS\System32\svchost.exe -k termsvcs
> ProcessId : 1192
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>TestTrack Pro Server
> DependOnSvc :
> DependOnGrp :
> Description :
> Name : TestTrackSrv
> PathName : C:\Program Files\Seapine\TestTrack Pro\TestTrack Pro
>Server.exe
> ProcessId : 3196
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Themes
> DependOnSvc :
> DependOnGrp :
> Description : Provides user experience theme management.
> Name : Themes
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Telnet
> DependOnSvc : RPCSS TCPIP NTLMSSP
> DependOnGrp :
> Description : Enables a remote user to log on to this computer and run
>programs, and supports various TCP/IP Telnet clients, including UNIX-based
>and Windows-based computers. If this service is stopped, remote user access
>to programs might be unavailable. If this service is disabled, any services
>that explicitly depend on it will fail to start.
> Name : TlntSvr
> PathName : C:\WINDOWS\system32\tlntsvr.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Distributed Link Tracking Server
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Enables the Distributed Link Tracking Client service within
>the same domain to provide more reliable and efficient maintenance of links
>within the domain. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : TrkSvr
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Distributed Link Tracking Client
> DependOnSvc : RpcSs
> DependOnGrp :
> Description : Enables client programs to track linked files that are moved
>within an NTFS volume, to another NTFS volume on the same computer, or to an
>NTFS volume on another computer. If this service is stopped, the links on
>this computer will not be maintained or tracked. If this service is
>disabled, any services that explicitly depend on it will fail to start.
> Name : TrkWks
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Terminal Services Session Directory
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Enables a user connection request to be routed to the
>appropriate terminal server in a cluster. If this service is stopped,
>connection requests will be routed to the first available server.
> Name : Tssdis
> PathName : C:\WINDOWS\System32\tssdis.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Upload Manager
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Manages the synchronous and asynchronous file transfers
>between clients and servers on the network. Driver data is anonymously
>uploaded from these transfers and then used by Microsoft to help users find
>the drivers they need. The Driver Feedback Server asks the client's
>permission to upload the computer's hardware profile and then search the
>Internet for information about how to obtain the appropriate driver or get
>support. If this service stops, Microsoft will not have access to the driver
>data.
> Name : uploadmgr
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Uninterruptible Power Supply
> DependOnSvc :
> DependOnGrp :
> Description : Manages an uninterruptible power supply (UPS) connected to
>the computer.
> Name : UPS
> PathName : C:\WINDOWS\System32\ups.exe
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Virtual Disk Service
> DependOnSvc : RpcSs PlugPlay
> DependOnGrp :
> Description : Provides software volume and hardware volume management
>service.
> Name : vds
> PathName : C:\WINDOWS\System32\vds.exe
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Volume Shadow Copy
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Manages and implements Volume Shadow Copies used for backup
>and other purposes. If this service is stopped, shadow copies will be
>unavailable for backup and the backup may fail. If this service is disabled,
>any services that explicitly depend on it will fail to start.
> Name : VSS
> PathName : C:\WINDOWS\System32\vssvc.exe
> ProcessId : 5368
> StartMode : Manual
> StartName : LocalSystem
> State : Running
>
>Windows Time
> DependOnSvc :
> DependOnGrp :
> Description : Maintains date and time synchronization on all clients and
>servers in the network. If this service is stopped, date and time
>synchronization will be unavailable. If this service is disabled, any
>services that explicitly depend on it will fail to start.
>
> Name : W32Time
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Web Proxy
> DependOnSvc : MspFltEx isactrl
> DependOnGrp :
> Description : Provides web connectivity to Web Proxy clients
> Name : W3Proxy
> PathName : C:\Program Files\Microsoft ISA Server\w3proxy.exe
> ProcessId : 6172
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Microsoft Scheduled Cache Content Download
> DependOnSvc : isactrl
> DependOnGrp :
> Description : Downloads cache content from Web servers based on specified
>scheduled jobs
> Name : w3schdwn
> PathName : C:\Program Files\Microsoft ISA Server\W3Prefch.exe
> ProcessId : 4120
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>World Wide Web Publishing Service
> DependOnSvc : RPCSS HTTPFilter IISADMIN
> DependOnGrp :
> Description : Provides Web connectivity and administration through the
>Internet Information Services Manager
> Name : W3SVC
> PathName : C:\WINDOWS\System32\svchost.exe -k iissvcs
> ProcessId : 5836
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Web Usage Logging Service
> DependOnSvc : RemoteAccess
> DependOnGrp :
> Description : Logs client Web activity for the Small Business Server usage
>report.
> Name : WBLOGSVC
> PathName : C:\Program Files\Microsoft Windows Small Business
>Server\monitoring\WbLogSvc.exe
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>WebClient
> DependOnSvc : MRxDAV
> DependOnGrp :
> Description : Enables Windows-based programs to create, access, and modify
>Internet-based files. If this service is stopped, these functions will not
>be available. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : WebClient
> PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
> ProcessId : 1388
> StartMode : Auto
> StartName : NT AUTHORITY\LocalService
> State : Running
>
>WinHTTP Web Proxy Auto-Discovery Service
> DependOnSvc : Dhcp
> DependOnGrp :
> Description : Implements the Web Proxy Auto-Discovery (WPAD) protocol for
>Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client
>to automatically discover a proxy configuration. If this service is stopped
>or disabled, the WPAD protocol will be executed within the HTTP client's
>process instead of an external service process; there would be no loss of
>functionality as a result.
> Name : WinHttpAutoProxySvc
> PathName : C:\WINDOWS\system32\svchost.exe -k LocalService
> ProcessId : 0
> StartMode : Manual
> StartName : NT AUTHORITY\LocalService
> State : Stopped
>
>Windows Management Instrumentation
> DependOnSvc : RPCSS Eventlog
> DependOnGrp :
> Description : Provides a common interface and object model to access
>management information about operating system, devices, applications and
>services. If this service is stopped, most Windows-based software will not
>function properly. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : winmgmt
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Windows Internet Name Service (WINS)
> DependOnSvc : RPCSS NTLMSSP SAMSS EventLog EventSystem
> DependOnGrp :
> Description : Resolves NetBIOS names for TCP/IP clients by locating
>network services that use NetBIOS names. If this service is stopped, network
>NetBIOS services will not function properly. If this service is disabled,
>any services that explicitly depend on it will fail to start.
> Name : WINS
> PathName : C:\WINDOWS\System32\wins.exe
> ProcessId : 3288
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Portable Media Serial Number Service
> DependOnSvc :
> DependOnGrp :
> Description : Retrieves the serial number of any portable media player
>connected to this computer. If this service is stopped, protected content
>might not be down loaded to the device.
> Name : WmdmPmSN
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Disabled
> StartName : LocalSystem
> State : Stopped
>
>Windows Management Instrumentation Driver Extensions
> DependOnSvc :
> DependOnGrp :
> Description : Monitors all drivers and event trace providers that are
>configured to publish Windows Management Instrumentation (WMI) or event
>trace information. If this service is disabled, any services that explicitly
>depend on it will fail to start.
> Name : Wmi
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>WMI Performance Adapter
> DependOnSvc : RPCSS
> DependOnGrp :
> Description : Provides performance library information from Windows
>Management Instrumentation (WMI) providers to clients on the network. This
>service only runs when Performance Data Helper is activated.
> Name : WmiApSrv
> PathName : C:\WINDOWS\system32\wbem\wmiapsrv.exe
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>Automatic Updates
> DependOnSvc :
> DependOnGrp :
> Description : Enables the download and installation of critical Windows
>updates. If the service is disabled, the operating system can be manually
>updated at the Windows Update Web site.
> Name : wuauserv
> PathName : C:\WINDOWS\system32\svchost.exe -k netsvcs
> ProcessId : 1472
> StartMode : Auto
> StartName : LocalSystem
> State : Running
>
>Wireless Configuration
> DependOnSvc : RpcSs Ndisuio
> DependOnGrp :
> Description : Enables automatic configuration for IEEE 802.11 adapters. If
>this service is stopped, automatic configuration will be unavailable. If
>this service is disabled, any services that explicitly depend on it will
>fail to start.
> Name : WZCSVC
> PathName : C:\WINDOWS\System32\svchost.exe -k netsvcs
> ProcessId : 0
> StartMode : Manual
> StartName : LocalSystem
> State : Stopped
>
>************************************************* ***************
>DRIVE INFORMATION
>************************************************* ***************
> Total Current Cache Size ( MB ) : 500
> Total Disk Size ( MB ) : 542451
> Total Free Space ( MB ) : 183161
>
>C:
> Files System : NTFS
> Current Cache ( MB ) : 500
> Disk Size ( MB ) : 70896
> Disk Free Space ( MB ) : 26444
>
>D:
> Files System : NTFS
> Current Cache ( MB ) : 0
> Disk Size ( MB ) : 70904
> Disk Free Space ( MB ) : 1869
>
>E:
> Files System : NTFS
> Current Cache ( MB ) : 0
> Disk Size ( MB ) : 114470
> Disk Free Space ( MB ) : 58464
>
>F:
> Files System : NTFS
> Current Cache ( MB ) : 0
> Disk Size ( MB ) : 286181
> Disk Free Space ( MB ) : 96384
>
>************************************************* ***************
>ISA FILES DATA
>************************************************* ***************
>** C:\Program Files\Microsoft ISA Server\
> 60 file(s) found.
> alertreg.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 25360
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> bwcapi.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 11536
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> bwcmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 50448
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> bwcpmon.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 8976
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> bwserver.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 30992
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> cachmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 6928
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> dailysum.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 11024
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> fltrsnk1.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 60688
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> ftpfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 19216
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> gkadm.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 239376
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> gkif.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 32016
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> gksvc.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 140560
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.285
>
> h323asn1.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 209168
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.285
>
> h323fltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 85776
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.285
>
> h323snap.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 47888
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> hfmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 6928
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> hfperf.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 5904
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> httpadm.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 36112
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> httpfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 51472
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> issdnsad.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 43792
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> issfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 77072
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.256
>
> latui.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 58128
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> msfpc.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 209680
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> msfpccom.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 1821968
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> msfpcsch.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 38160
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> msfpcsnp.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 2570000
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> msfpcui.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 2615568
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> msowc.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 3080237
> Manufacturer : Microsoft Corporation
> Version : 9.0.0.2710
>
> mspadmin.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 178448
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.257
>
> mspapi.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 33040
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> msphlpr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 101136
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.257
>
> mspmon.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 16656
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> mspmsg.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 197392
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> mspsec.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 15632
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> pfmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 6416
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> prxatq.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 68368
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> repgen.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 16656
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> repsnap.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 200976
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> rpcfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 43280
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> smtpcred.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 17680
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> smtpfadm.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 205072
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> smtpfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 92432
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> socksadm.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 37136
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> socksflt.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 34064
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> socksprf.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 6416
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> strmadmn.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 70416
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> strmfltr.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 62736
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> sumgen.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 789264
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> vps2.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 34576
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> w3papi.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 8464
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> w3pinet.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 30992
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> w3pmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 8976
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> w3prefch.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 34064
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> w3proxy.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 391440
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.257
>
> wspadmin.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 21264
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspapi.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 7952
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspfwps.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 19216
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspmib.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 7952
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspperf.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 6928
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> wspsrv.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 298768
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.257
>
>
>** C:\Program Files\Microsoft ISA Server\$UNINSTALL_ISA_SP$\
> 3 file(s) found.
> hotfix.exe
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 70928
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> hotfix_res.dll
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 34576
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> hotfix_utl.dll
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 5904
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
>
>** C:\Program Files\Microsoft ISA Server\$UNINSTALL_ISA_SP$\SP_1\
> 3 file(s) found.
> hotfix.exe
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 70928
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> hotfix_res.dll
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 34576
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
> hotfix_utl.dll
> Attributes : ReadOnly
> Compressed : False
> Encrypted : False
> FileSize : 5904
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.290
>
>
>** C:\Program Files\Microsoft ISA Server\Clients\
> 5 file(s) found.
> instmsia.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 1489152
> Manufacturer : Microsoft Corporation
> Version : 5.0.810.500
>
> instmsiw.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 1499904
> Manufacturer : Microsoft Corporation
> Version : 5.0.810.500
>
> setup.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 86016
> Manufacturer : Installshield Software Corporation
> Version : 1.51.129.0
>
> setup_a.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 36352
> Manufacturer : Microsoft Corporatio
> Version : 3.0.1200.50
>
> stpwrapp.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 25100
> Manufacturer :
> Version :
>
>
>** C:\Program Files\Microsoft ISA Server\Clients\i386\
> 16 file(s) found.
> acmsetup.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 352768
> Manufacturer : Microsoft Corporation
> Version : 3.1.0.1811
>
> aux16.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 30936
> Manufacturer :
> Version :
>
> aux32_16.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 31232
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> chkwsp32.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 49936
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> credtool.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 7440
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> isatray.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 52496
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> mspcutil.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 5904
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> mssetup.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 264704
> Manufacturer : Microsoft Corporation
> Version : 3.1.0.1811
>
> rws32.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 171792
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> sporder.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 8464
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> stpext32.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 135952
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> uninst.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 34576
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspcpl32.cpl
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 160528
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
> wspntlm.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 33040
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wsprefr.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 29968
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
> wspwsp.dll
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 97552
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.265
>
>
>** C:\Program Files\Microsoft ISA Server\SetupBin\
> 2 file(s) found.
> setup.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 36352
> Manufacturer : Microsoft Corporatio
> Version : 3.0.1200.50
>
> uninst.exe
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 34576
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.50
>
>
>** C:\WINDOWS\system32\drivers\
> 2 file(s) found.
> mspfltex.sys
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 41296
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.255
>
> mspnat.sys
> Attributes : None
> Compressed : False
> Encrypted : False
> FileSize : 24656
> Manufacturer : Microsoft Corporation
> Version : 3.0.1200.166
>
>
>************************************************* ***************
>GATEKEEPER CONFIGURATION
>************************************************* ***************
>
>DESTINATIONS
>============
>
>
>PHONE NUMBER RULES
>==================
>
>Name : Local
> Enabled : True
> Description : All aliases are resolved using the local registration
>database
> Prefix or Phone Number :
> Route all phone numbers using this prefix : True
> Metric : 1
> Destination Type : Registration Database
>
>EMAIL ADDRESS RULES
>===================
>Name : Local
> Enabled : True
> Description : All aliases are resolved using the local registration
>database
> DNS Domain Name :
> Route all e-mail addresses using this DNS Domain Name : True
> Metric : 1
> Destination Type : Registration Database
>
>
>IP ADDRESS RULES
>================
>
>Name : Class A
> Enabled : True
> Description : No address translation is performed
> IP Address : 0.0.0.0/1
> Metric : 1
> Destination Type : Local Network
>
>Name : Class B
> Enabled : True
> Description : No address translation is performed
> IP Address : 128.0.0.0/2
> Metric : 1
> Destination Type : Local Network
>
>Name : Class C
> Enabled : True
> Description : No address translation is performed
> IP Address : 192.0.0.0/3
> Metric : 1
> Destination Type : Local Network
>
>************************************************* ***************
>URLSCAN.INI
>************************************************* ***************
> URLScan.ini was not found on this server.
>
>************************************************* ***************
>IPCONFIG/ALL
>************************************************* ***************
>Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : gtcsbs03
> Primary Dns Suffix . . . . . . . : GTC.local
> IP Routing Enabled . . . . . . . : via IP Packet Filtering setting
> WINS Proxy Enabled . . . . . . . : False
> DNS Devolution Enabled. . . . . . : True
>
>Server Local Area Connection
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
>#2 - Packet Scheduler Miniport
> Physical Address. . . . . . . . . : 00:E0:81:2E:53:09
> DHCP Enabled. . . . . . . . . . . : False
> Autoconfiguration Enabled . . . . : True
> Subnet Mask . . . . . . . . . . . : 255.0.0.0
> IP Address . . . . . . . . . . . : 10.0.0.3
> Default Gateway . . . . . . . . . :
> DNS Servers . . . . . . . . . . . : 10.0.0.3
> Primary WINS Server . . . . . . . : 10.0.0.3
> NetBIOS over TCP/IP . . . . . . . : Enabled
> DNS Domain Suffix Search Order . :
>
>WAN
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet -
>Packet Scheduler Miniport
> Physical Address. . . . . . . . . : 00:E0:81:2E:53:08
> DHCP Enabled. . . . . . . . . . . : False
> Autoconfiguration Enabled . . . . : True
> Subnet Mask . . . . . . . . . . . : 255.255.252.0
> IP Address . . . . . . . . . . . : 68.145.104.177
> Default Gateway . . . . . . . . . : 68.145.104.1
> DNS Servers . . . . . . . . . . . : 10.0.0.3
> Primary WINS Server . . . . . . . : 10.0.0.3
> NetBIOS over TCP/IP . . . . . . . : Disabled
> DNS Domain Suffix Search Order . :
>
>
>************************************************* ***************
>Running "NETSTAT -R"
>************************************************* ***************
>
>IPv4 Route Table
>================================================= ======================

====
>Interface List
>0x1 ........................... MS TCP Loopback interface
>0x2 ...00 e0 81 2e 53 08 ...... Broadcom NetXtreme Gigabit Ethernet - Packet
>Scheduler Miniport
>0x10003 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
>0x10004 ...00 e0 81 2e 53 09 ...... Broadcom NetXtreme Gigabit Ethernet #2 -
>Packet Scheduler Miniport
>================================================= ======================

====
>================================================= ======================

====
>Active Routes:
>Network Destination Netmask Gateway Interface Metric
> 0.0.0.0 0.0.0.0 68.145.104.1 68.145.104.177 1
> 10.0.0.0 255.0.0.0 10.0.0.3 10.0.0.3 10
> 10.0.0.3 255.255.255.255 127.0.0.1 127.0.0.1 10
> 10.0.0.22 255.255.255.255 127.0.0.1 127.0.0.1 50
> 10.255.255.255 255.255.255.255 10.0.0.3 10.0.0.3 10
> 68.145.104.0 255.255.252.0 68.145.104.177 68.145.104.177 20
> 68.145.104.177 255.255.255.255 127.0.0.1 127.0.0.1 20
> 68.255.255.255 255.255.255.255 68.145.104.177 68.145.104.177 20
> 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
> 224.0.0.0 240.0.0.0 10.0.0.3 10.0.0.3 10
> 224.0.0.0 240.0.0.0 68.145.104.177 68.145.104.177 20
> 255.255.255.255 255.255.255.255 10.0.0.3 10.0.0.3 1
> 255.255.255.255 255.255.255.255 68.145.104.177 68.145.104.177 1
>Default Gateway: 68.145.104.1
>================================================= ======================

====
>Persistent Routes:
> None
>
>************************************************* ***************
>Running "NETSH SHOW HELPER"
>************************************************* ***************
>Helper GUID DLL Filename Command
>-------------------------------------- ------------ -------
>{1D0FA29B-E93E-11D2-A91E-009027450464} AAAAMON.DLL aaaa
>{00770721-44EA-11D5-93BA-00B0D022DD1F} HNETMON.DLL bridge
>{0F7412F0-80FC-11D2-BE57-00C04FC3357A} DHCPMON.DLL dhcp
>{CC41B21B-8040-4BB0-AC2A-820623160940} DGNET.DLL diag
>{0705ECA1-7AAC-11D2-89DC-006008B0E5B9} IFMON.DLL interface
>{89D00931-1E00-11D3-8738-00600837C775} IFMON.DLL ip
>{05BB0FE9-8D89-48DE-B7BB-9F138B2E950C} IPV6MON.DLL ipv6
>{F1EFA7E5-7169-4EC0-A63A-9B22A743E19C} IPV6MON.DLL 6to4
>{F1EFA7E5-7169-4EC0-A63A-9B22A743E19C} IPV6MON.DLL isatap
>{86A3A33F-4D51-47FF-B24C-8E9B13CEB3A2} IPV6MON.DLL portproxy
>{F7E0BC27-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL ipsec
>{F7E0BC29-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL dynamic
>{F7E0BC28-BA6E-4145-A123-012F1922F3F1} NSHIPSEC.DLL static
>{0705ECA2-7AAC-11D2-89DC-006008B0E5B9} RASMONTR.DLL ras
>{42E3CC21-098C-11D3-8C4D-00104BCA495B} RASMONTR.DLL aaaa
>{E0C5D007-D34C-11D2-9B76-00104BCA495B} RASMONTR.DLL appletalk
>{90FE6CFC-B6A2-463B-AA12-25E615EC3C66} RASMONTR.DLL diagnostics
>{13D12A78-D0FB-11D2-9B76-00104BCA495B} RASMONTR.DLL ip
>{6FB90155-D324-11D2-9B76-00104BCA495B} RASMONTR.DLL ipx
>{69F21BC3-D349-11D2-9B76-00104BCA495B} RASMONTR.DLL netbeui
>{65EC23C0-D1B9-11D2-89E4-006008B0E5B9} IPMONTR.DLL routing
>{0705ECA0-7AAC-11D2-89DC-006008B0E5B9} IPMONTR.DLL ip
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL autodhcp
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL dnsproxy
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL igmp
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL nat
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL ospf
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL relay
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL rip
>{0705ECA3-7AAC-11D2-89DC-006008B0E5B9} IPPROMON.DLL routerdiscovery
>{592852F7-5F6F-470B-9097-C5D33B612975} RPCNSH.DLL rpc
>{BF563723-9065-11D2-BE87-00C04FC3357A} WINSMON.DLL wins
>
>
>************************************************* ***************
>Running "WLBS DISPLAY"
>************************************************* ***************
>WLBS Cluster Control Utility V2.4 (c) 1997-2003 Microsoft Corporation.
>
>WLBS is not installed on this system or you do not have
>
>sufficient privileges to administer the cluster.
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP SHOW INTERFACE"
>************************************************* ***************
>State Type Interface
>---------- ----------- ---------------------------------------------
>Enabled Dedicated WAN
>Enabled Dedicated Server Local Area Connection
>Enabled Internal Internal
>Enabled Loop Back Loopback
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP SHOW PERSISTENTROUTES"
>************************************************* ***************
>Persistent routes, according to stored configuration:
>No entries were found.
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP SHOW RTMDESTINATIONS"
>************************************************* ***************
>
> Prefix Protocol Prf Met Gateway Vw Interface
>------------------ ---------- --- --- --------------- -- ----------------
> 0.0.0.0/0 NetMgmt 10 1 68.145.104.1 UM WAN
> 10.0.0.0/8 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
> 10.0.0.3/32 Local 1 10 127.0.0.1 U Loopback
> 10.0.0.22/32 Local 1 50 127.0.0.1 U Loopback
> 10.255.255.255/32 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
> 68.145.104.0/22 Local 1 20 68.145.104.177 UM WAN
> 68.145.104.177/32 Local 1 20 127.0.0.1 U Loopback
> 68.255.255.255/32 Local 1 20 68.145.104.177 UM WAN
> 127.0.0.0/8 Local 1 1 127.0.0.1 U Loopback
> 127.0.0.1/32 Local 1 1 127.0.0.1 U Loopback
> 224.0.0.0/4 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
>255.255.255.255/32 Local 1 1 10.0.0.3 UM Server Local
>Area Connection
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP SHOW RTMROUTES"
>************************************************* ***************
>
> Prefix Protocol Prf Met Gateway Vw Interface
>------------------ ---------- --- --- --------------- -- ----------------
> 0.0.0.0/0 NetMgmt 10 1 68.145.104.1 UM WAN
> 10.0.0.0/8 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
> 10.0.0.3/32 Local 1 10 127.0.0.1 U Loopback
> 10.0.0.22/32 Local 1 50 127.0.0.1 U Loopback
> 10.255.255.255/32 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
> 68.145.104.0/22 Local 1 20 68.145.104.177 UM WAN
> 68.145.104.177/32 Local 1 20 127.0.0.1 U Loopback
> 68.255.255.255/32 Local 1 20 68.145.104.177 UM WAN
> 127.0.0.0/8 Local 1 1 127.0.0.1 U Loopback
> 127.0.0.1/32 Local 1 1 127.0.0.1 U Loopback
> 224.0.0.0/4 Local 1 10 10.0.0.3 UM Server Local
>Area Connection
> 224.0.0.0/4 Local 1 20 68.145.104.177 UM WAN
>255.255.255.255/32 Local 1 1 10.0.0.3 UM Server Local
>Area Connection
>255.255.255.255/32 Local 1 1 68.145.104.177 UM WAN
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP RELAY SHOW GLOBAL"
>************************************************* ***************
>DHCP Relay Agent must be installed first.
>
>
>************************************************* ***************
>Running "NETSH ROUTING IP RELAY SHOW IFCONFIG"
>************************************************* ***************
>DHCP Relay Agent must be installed first.
>
>
>************************************************* ***************
>Running "NETSTAT -ANO"
>************************************************* ***************
>
>Active Connections
>
> Proto Local Address Foreign Address State PID
> TCP 0.0.0.0:25 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:42 0.0.0.0:0 LISTENING 3288
> TCP 0.0.0.0:88 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:99 0.0.0.0:0 LISTENING 3196
> TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 1136
> TCP 0.0.0.0:389 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
> TCP 0.0.0.0:464 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:593 0.0.0.0:0 LISTENING 1136
> TCP 0.0.0.0:636 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:691 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:1024 0.0.0.0:0 LISTENING 4764
> TCP 0.0.0.0:1433 0.0.0.0:0 LISTENING 1560
> TCP 0.0.0.0:1723 0.0.0.0:0 LISTENING 4
> TCP 0.0.0.0:2410 0.0.0.0:0 LISTENING 5544
> TCP 0.0.0.0:2412 0.0.0.0:0 LISTENING 5544
> TCP 0.0.0.0:3004 0.0.0.0:0 LISTENING 392
> TCP 0.0.0.0:3088 0.0.0.0:0 LISTENING 4780
> TCP 0.0.0.0:3115 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:3268 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:3269 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING 1192
> TCP 0.0.0.0:5100 0.0.0.0:0 LISTENING 2456
> TCP 0.0.0.0:6001 0.0.0.0:0 LISTENING 4780
> TCP 0.0.0.0:6002 0.0.0.0:0 LISTENING 3436
> TCP 0.0.0.0:6004 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:27000 0.0.0.0:0 LISTENING 464
> TCP 0.0.0.0:29034 0.0.0.0:0 LISTENING 324
> TCP 0.0.0.0:52892 0.0.0.0:0 LISTENING 6668
> TCP 0.0.0.0:52899 0.0.0.0:0 LISTENING 6172
> TCP 0.0.0.0:65379 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:65380 0.0.0.0:0 LISTENING 1472
> TCP 0.0.0.0:65382 0.0.0.0:0 LISTENING 944
> TCP 0.0.0.0:65435 0.0.0.0:0 LISTENING 256
> TCP 0.0.0.0:65439 0.0.0.0:0 LISTENING 808
> TCP 0.0.0.0:65457 0.0.0.0:0 LISTENING 2196
> TCP 0.0.0.0:65469 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:65472 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:65479 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:65480 0.0.0.0:0 LISTENING 572
> TCP 0.0.0.0:65491 0.0.0.0:0 LISTENING 3288
> TCP 0.0.0.0:65492 0.0.0.0:0 LISTENING 3436
> TCP 0.0.0.0:65527 0.0.0.0:0 LISTENING 3316
> TCP 10.0.0.3:53 0.0.0.0:0 LISTENING 256
> TCP 10.0.0.3:80 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:80 10.0.0.3:32061 ESTABLISHED 4
> TCP 10.0.0.3:80 10.0.0.3:32192 ESTABLISHED 4
> TCP 10.0.0.3:80 10.0.0.34:3866 ESTABLISHED 4
> TCP 10.0.0.3:135 10.0.0.3:32179 ESTABLISHED 1136
> TCP 10.0.0.3:135 10.0.0.3:32205 ESTABLISHED 1136
> TCP 10.0.0.3:139 0.0.0.0:0 LISTENING 4
> TCP 10.0.0.3:389 10.0.0.3:30501 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30544 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30545 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30546 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30553 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30556 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30557 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30558 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30559 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30560 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30561 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30562 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30579 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30580 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30581 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30582 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30583 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30584 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30589 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:30629 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:31645 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:31881 ESTABLISHED 944
> TCP 10.0.0.3:389 10.0.0.3:32195 TIME_WAIT 0
> TCP 10.0.0.3:389 10.0.0.3:32196 TIME_WAIT 0
> TCP 10.0.0.3:389 10.0.0.3:32198 TIME_WAIT 0
> TCP 10.0.0.3:389 10.0.0.3:32199 TIME_WAIT 0
> TCP 10.0.0.3:389 10.0.0.3:32259 TIME_WAIT 0
> TCP 10.0.0.3:389 10.0.0.3:32260 TIME_WAIT 0
> TCP 10.0.0.3:443 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:444 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:445 10.0.0.3:32176 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.11:4158 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.20:2408 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.24:4077 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.32:1255 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.43:1493 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.83:1200 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.97:2718 ESTABLISHED 4
> TCP 10.0.0.3:445 10.0.0.97:3669 ESTABLISHED 4
> TCP 10.0.0.3:691 10.0.0.3:53074 ESTABLISHED 572
> TCP 10.0.0.3:691 10.0.0.3:53347 ESTABLISHED 572
> TCP 10.0.0.3:691 10.0.0.3:53348 ESTABLISHED 572
> TCP 10.0.0.3:1080 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:1745 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:2404 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:3088 10.0.0.43:4116 ESTABLISHED 4780
> TCP 10.0.0.3:3088 10.0.0.83:1151 ESTABLISHED 4780
> TCP 10.0.0.3:3097 10.0.0.3:65379 ESTABLISHED 3436
> TCP 10.0.0.3:3268 10.0.0.3:30547 ESTABLISHED 944
> TCP 10.0.0.3:3268 10.0.0.3:30552 ESTABLISHED 944
> TCP 10.0.0.3:3268 10.0.0.3:30569 ESTABLISHED 944
> TCP 10.0.0.3:3268 10.0.0.3:30573 ESTABLISHED 944
> TCP 10.0.0.3:3268 10.0.0.3:30574 ESTABLISHED 944
> TCP 10.0.0.3:3455 10.0.0.3:389 CLOSE_WAIT 1472
> TCP 10.0.0.3:4251 10.0.0.3:65379 ESTABLISHED 944
> TCP 10.0.0.3:6897 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:8080 0.0.0.0:0 LISTENING 6172
> TCP 10.0.0.3:8081 0.0.0.0:0 LISTENING 5836
> TCP 10.0.0.3:8443 0.0.0.0:0 LISTENING 6172
> TCP 10.0.0.3:10097 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10098 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10099 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10100 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10101 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10102 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10103 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10104 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10105 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10106 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10107 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10108 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10109 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10110 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10111 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10112 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10113 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10114 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10115 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10116 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10117 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10118 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10119 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10120 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10121 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10122 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10123 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10124 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10125 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10126 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10127 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10128 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10129 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10130 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10131 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10132 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10133 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10134 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10135 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10136 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10137 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10138 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10139 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10140 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10141 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10142 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10143 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10144 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10145 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10146 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10147 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10148 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10149 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10150 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10151 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10152 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10153 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10154 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10155 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10156 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10157 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10158 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10159 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10160 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10161 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10162 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10163 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10164 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10165 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10166 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10167 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10168 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10169 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10170 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10171 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10172 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10173 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10174 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10175 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10176 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10177 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10178 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10179 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10180 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10181 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10182 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10183 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10184 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10185 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10186 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10187 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10188 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10189 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10190 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10191 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10192 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10193 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10194 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10195 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10196 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10197 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10198 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10199 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10200 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10201 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10202 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10203 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10204 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10205 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10206 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10207 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:10208 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.3:23539 10.0.0.3:389 CLOSE_WAIT 4780
> TCP 10.0.0.3:25851 10.0.0.3:389 CLOSE_WAIT 7592
> TCP 10.0.0.3:27451 10.0.0.3:389 CLOSE_WAIT 1424
> TCP 10.0.0.3:27733 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.3:30501 10.0.0.3:389 ESTABLISHED 4780
> TCP 10.0.0.3:30544 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30545 10.0.0.3:389 ESTABLISHED 572
> TCP 10.0.0.3:30546 10.0.0.3:389 ESTABLISHED 2592
> TCP 10.0.0.3:30547 10.0.0.3:3268 ESTABLISHED 3436
> TCP 10.0.0.3:30552 10.0.0.3:3268 ESTABLISHED 2592
> TCP 10.0.0.3:30553 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30556 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30557 10.0.0.3:389 ESTABLISHED 572
> TCP 10.0.0.3:30558 10.0.0.3:389 ESTABLISHED 4780
> TCP 10.0.0.3:30559 10.0.0.3:389 ESTABLISHED 4780
> TCP 10.0.0.3:30560 10.0.0.3:389 ESTABLISHED 572
> TCP 10.0.0.3:30561 10.0.0.3:389 ESTABLISHED 572
> TCP 10.0.0.3:30562 10.0.0.3:389 ESTABLISHED 572
> TCP 10.0.0.3:30563 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.3:30569 10.0.0.3:3268 ESTABLISHED 572
> TCP 10.0.0.3:30573 10.0.0.3:3268 ESTABLISHED 572
> TCP 10.0.0.3:30574 10.0.0.3:3268 ESTABLISHED 4780
> TCP 10.0.0.3:30579 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30580 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30581 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30582 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30583 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30584 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30589 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:30629 10.0.0.3:389 ESTABLISHED 2196
> TCP 10.0.0.3:31127 10.0.0.3:65379 ESTABLISHED 3436
> TCP 10.0.0.3:31136 10.0.0.3:3268 CLOSE_WAIT 572
> TCP 10.0.0.3:31139 10.0.0.3:3268 CLOSE_WAIT 1424
> TCP 10.0.0.3:31146 10.0.0.3:389 CLOSE_WAIT 1424
> TCP 10.0.0.3:31645 10.0.0.3:389 ESTABLISHED 3436
> TCP 10.0.0.3:31881 10.0.0.3:389 ESTABLISHED 1472
> TCP 10.0.0.3:32020 10.0.0.3:135 TIME_WAIT 0
> TCP 10.0.0.3:32021 10.0.0.3:65379 TIME_WAIT 0
> TCP 10.0.0.3:32022 10.0.0.3:65379 TIME_WAIT 0
> TCP 10.0.0.3:32061 10.0.0.3:80 ESTABLISHED 6172
> TCP 10.0.0.3:32153 10.0.0.3:135 TIME_WAIT 0
> TCP 10.0.0.3:32154 10.0.0.3:135 TIME_WAIT 0
> TCP 10.0.0.3:32155 10.0.0.3:65379 TIME_WAIT 0
> TCP 10.0.0.3:32176 10.0.0.3:445 ESTABLISHED 4
> TCP 10.0.0.3:32179 10.0.0.3:135 ESTABLISHED 944
> TCP 10.0.0.3:32180 10.0.0.3:65379 ESTABLISHED 944
> TCP 10.0.0.3:32186 10.0.0.2:139 ESTABLISHED 4
> TCP 10.0.0.3:32192 10.0.0.3:80 ESTABLISHED 1388
> TCP 10.0.0.3:32205 10.0.0.3:135 ESTABLISHED 6388
> TCP 10.0.0.3:32206 10.0.0.3:65379 ESTABLISHED 6388
> TCP 10.0.0.3:32222 10.0.0.77:445 ESTABLISHED 4
> TCP 10.0.0.3:32224 10.0.0.4:445 ESTABLISHED 4
> TCP 10.0.0.3:33131 10.0.0.3:389 CLOSE_WAIT 820
> TCP 10.0.0.3:52932 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.3:52933 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.3:52934 10.0.0.3:3268 CLOSE_WAIT 3436
> TCP 10.0.0.3:52935 10.0.0.3:3268 CLOSE_WAIT 3436
> TCP 10.0.0.3:52940 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.3:53074 10.0.0.3:691 ESTABLISHED 572
> TCP 10.0.0.3:53347 10.0.0.3:691 ESTABLISHED 2592
> TCP 10.0.0.3:53348 10.0.0.3:691 ESTABLISHED 4780
> TCP 10.0.0.3:56895 10.0.0.3:389 CLOSE_WAIT 7592
> TCP 10.0.0.3:60173 10.0.0.3:389 CLOSE_WAIT 7592
> TCP 10.0.0.3:65379 10.0.0.3:3097 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:4251 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:31127 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:32180 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:32206 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:65461 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.3:65462 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.43:2944 ESTABLISHED 944
> TCP 10.0.0.3:65379 10.0.0.83:1147 ESTABLISHED 944
> TCP 10.0.0.3:65439 10.0.0.97:3487 ESTABLISHED 808
> TCP 10.0.0.3:65461 10.0.0.3:65379 ESTABLISHED 2196
> TCP 10.0.0.3:65462 10.0.0.3:65379 ESTABLISHED 2196
> TCP 10.0.0.3:65487 10.0.0.3:389 CLOSE_WAIT 3316
> TCP 10.0.0.3:65508 10.0.0.3:389 CLOSE_WAIT 3436
> TCP 10.0.0.22:1080 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.22:1745 0.0.0.0:0 LISTENING 6668
> TCP 10.0.0.22:8080 0.0.0.0:0 LISTENING 6172
> TCP 10.0.0.22:8443 0.0.0.0:0 LISTENING 6172
> TCP 68.145.104.177:25 70.24.34.153:4030 TIME_WAIT 0
> TCP 68.145.104.177:80 0.0.0.0:0 LISTENING 6172
> TCP 68.145.104.177:389 68.145.104.177:30568 ESTABLISHED 944
> TCP 68.145.104.177:389 68.145.104.177:32201 TIME_WAIT 0
> TCP 68.145.104.177:443 0.0.0.0:0 LISTENING 6172
> TCP 68.145.104.177:443 210.76.124.50:37172 ESTABLISHED 6172
> TCP 68.145.104.177:3389 10.0.0.43:1505 ESTABLISHED 1192
> TCP 68.145.104.177:3389 68.145.183.14:2425 ESTABLISHED 1192
> TCP 68.145.104.177:30568 68.145.104.177:389 ESTABLISHED 3436
> TCP 68.145.104.177:32168 195.245.80.67:25 ESTABLISHED 572
> TCP 68.145.104.177:32203 66.139.79.227:25 TIME_WAIT 0
> TCP 68.145.104.177:32214 216.119.106.127:25 TIME_WAIT 0
> TCP 68.145.104.177:32233 213.158.72.25:25 TIME_WAIT 0
> TCP 68.145.104.177:32243 165.212.8.51:25 SYN_SENT 572
> TCP 68.145.104.177:32250 64.202.160.122:25 SYN_SENT 572
> TCP 68.145.104.177:32252 66.84.242.55:25 TIME_WAIT 0
> TCP 68.145.104.177:32255 212.181.91.6:25 SYN_SENT 572
> TCP 68.145.104.177:32264 64.202.160.122:25 SYN_SENT 572
> TCP 127.0.0.1:53 0.0.0.0:0 LISTENING 256
> TCP 127.0.0.1:80 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:389 127.0.0.1:30623 ESTABLISHED 944
> TCP 127.0.0.1:443 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:444 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:445 127.0.0.1:32189 ESTABLISHED 4
> TCP 127.0.0.1:2404 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:6897 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:8080 0.0.0.0:0 LISTENING 6172
> TCP 127.0.0.1:8081 0.0.0.0:0 LISTENING 5836
> TCP 127.0.0.1:8443 0.0.0.0:0 LISTENING 6172
> TCP 127.0.0.1:11223 0.0.0.0:0 LISTENING 6172
> TCP 127.0.0.1:30623 127.0.0.1:389 ESTABLISHED 256
> TCP 127.0.0.1:32189 127.0.0.1:445 ESTABLISHED 4
> TCP 127.0.0.1:32207 127.0.0.1:5100 TIME_WAIT 0
> UDP 0.0.0.0:42 *:* 3288
> UDP 0.0.0.0:135 *:* 1136
> UDP 0.0.0.0:445 *:* 4
> UDP 0.0.0.0:500 *:* 944
> UDP 0.0.0.0:1434 *:* 1560
> UDP 0.0.0.0:1701 *:* 4
> UDP 0.0.0.0:2967 *:* 3100
> UDP 0.0.0.0:3011 *:* 2592
> UDP 0.0.0.0:3015 *:* 572
> UDP 0.0.0.0:3021 *:* 888
> UDP 0.0.0.0:3024 *:* 2556
> UDP 0.0.0.0:3032 *:* 1832
> UDP 0.0.0.0:3045 *:* 188
> UDP 0.0.0.0:3068 *:* 1356
> UDP 0.0.0.0:3082 *:* 4780
> UDP 0.0.0.0:3089 *:* 4780
> UDP 0.0.0.0:3098 *:* 3436
> UDP 0.0.0.0:3099 *:* 3436
> UDP 0.0.0.0:3102 *:* 5544
> UDP 0.0.0.0:3116 *:* 572
> UDP 0.0.0.0:3124 *:* 1356
> UDP 0.0.0.0:3127 *:* 1356
> UDP 0.0.0.0:3134 *:* 1356
> UDP 0.0.0.0:3454 *:* 1472
> UDP 0.0.0.0:3456 *:* 572
> UDP 0.0.0.0:3457 *:* 6172
> UDP 0.0.0.0:3458 *:* 572
> UDP 0.0.0.0:4375 *:* 716
> UDP 0.0.0.0:4500 *:* 944
> UDP 0.0.0.0:5093 *:* 2760
> UDP 0.0.0.0:5999 *:* 2456
> UDP 0.0.0.0:18732 *:* 7948
> UDP 0.0.0.0:19092 *:* 4764
> UDP 0.0.0.0:22169 *:* 1356
> UDP 0.0.0.0:22170 *:* 1356
> UDP 0.0.0.0:22171 *:* 1356
> UDP 0.0.0.0:22172 *:* 1356
> UDP 0.0.0.0:22173 *:* 1356
> UDP 0.0.0.0:29197 *:* 2416
> UDP 0.0.0.0:32261 *:* 6668
> UDP 0.0.0.0:32262 *:* 572
> UDP 0.0.0.0:32267 *:* 572
> UDP 0.0.0.0:33130 *:* 820
> UDP 0.0.0.0:36754 *:* 3384
> UDP 0.0.0.0:38293 *:* 628
> UDP 0.0.0.0:53120 *:* 3600
> UDP 0.0.0.0:56893 *:* 7592
> UDP 0.0.0.0:62039 *:* 1424
> UDP 0.0.0.0:65394 *:* 1356
> UDP 0.0.0.0:65422 *:* 256
> UDP 0.0.0.0:65423 *:* 256
> UDP 0.0.0.0:65441 *:* 808
> UDP 0.0.0.0:65444 *:* 1784
> UDP 0.0.0.0:65449 *:* 1784
> UDP 0.0.0.0:65458 *:* 2196
> UDP 0.0.0.0:65486 *:* 3316
> UDP 0.0.0.0:65493 *:* 3436
> UDP 0.0.0.0:65494 *:* 3436
> UDP 10.0.0.3:53 *:* 256
> UDP 10.0.0.3:67 *:* 3316
> UDP 10.0.0.3:68 *:* 3316
> UDP 10.0.0.3:88 *:* 944
> UDP 10.0.0.3:123 *:* 1472
> UDP 10.0.0.3:137 *:* 4
> UDP 10.0.0.3:138 *:* 4
> UDP 10.0.0.3:389 *:* 944
> UDP 10.0.0.3:464 *:* 944
> UDP 10.0.0.3:1718 *:* 496
> UDP 10.0.0.3:1719 *:* 496
> UDP 10.0.0.3:1745 *:* 6668
> UDP 10.0.0.3:2535 *:* 3316
> UDP 10.0.0.3:4451 *:* 6668
> UDP 10.0.0.3:4452 *:* 6668
> UDP 10.0.0.3:4453 *:* 6668
> UDP 10.0.0.3:4454 *:* 6668
> UDP 10.0.0.3:4455 *:* 6668
> UDP 10.0.0.3:4456 *:* 6668
> UDP 10.0.0.3:4457 *:* 6668
> UDP 10.0.0.3:4458 *:* 6668
> UDP 10.0.0.3:4459 *:* 6668
> UDP 10.0.0.3:4460 *:* 6668
> UDP 10.0.0.3:4461 *:* 6668
> UDP 10.0.0.3:4462 *:* 6668
> UDP 10.0.0.3:4463 *:* 6668
> UDP 10.0.0.3:4464 *:* 6668
> UDP 10.0.0.3:4465 *:* 6668
> UDP 10.0.0.3:4466 *:* 6668
> UDP 10.0.0.3:4467 *:* 6668
> UDP 10.0.0.3:4468 *:* 6668
> UDP 10.0.0.3:4469 *:* 6668
> UDP 10.0.0.3:4470 *:* 6668
> UDP 10.0.0.3:4471 *:* 6668
> UDP 10.0.0.3:4472 *:* 6668
> UDP 10.0.0.3:4473 *:* 6668
> UDP 10.0.0.3:4474 *:* 6668
> UDP 10.0.0.3:4475 *:* 6668
> UDP 10.0.0.3:4476 *:* 6668
> UDP 10.0.0.3:4477 *:* 6668
> UDP 10.0.0.3:4478 *:* 6668
> UDP 10.0.0.3:4479 *:* 6668
> UDP 10.0.0.3:4480 *:* 6668
> UDP 10.0.0.3:4481 *:* 6668
> UDP 10.0.0.3:4482 *:* 6668
> UDP 10.0.0.3:4483 *:* 6668
> UDP 10.0.0.3:4484 *:* 6668
> UDP 10.0.0.3:4485 *:* 6668
> UDP 10.0.0.3:4486 *:* 6668
> UDP 10.0.0.3:4487 *:* 6668
> UDP 10.0.0.3:4488 *:* 6668
> UDP 10.0.0.3:4489 *:* 6668
> UDP 10.0.0.3:4490 *:* 6668
> UDP 10.0.0.3:4491 *:* 6668
> UDP 10.0.0.3:4492 *:* 6668
> UDP 10.0.0.3:4493 *:* 6668
> UDP 10.0.0.3:4494 *:* 6668
> UDP 10.0.0.3:4495 *:* 6668
> UDP 10.0.0.3:4496 *:* 6668
> UDP 10.0.0.3:4497 *:* 6668
> UDP 10.0.0.3:4498 *:* 6668
> UDP 10.0.0.3:4499 *:* 6668
> UDP 10.0.0.3:4501 *:* 6668
> UDP 10.0.0.3:4502 *:* 6668
> UDP 10.0.0.3:4503 *:* 6668
> UDP 10.0.0.3:4504 *:* 6668
> UDP 10.0.0.3:4505 *:* 6668
> UDP 10.0.0.3:4506 *:* 6668
> UDP 10.0.0.3:4507 *:* 6668
> UDP 10.0.0.3:4508 *:* 6668
> UDP 10.0.0.3:4509 *:* 6668
> UDP 10.0.0.3:4510 *:* 6668
> UDP 10.0.0.3:4511 *:* 6668
> UDP 10.0.0.3:4512 *:* 6668
> UDP 10.0.0.3:4513 *:* 6668
> UDP 10.0.0.3:4514 *:* 6668
> UDP 10.0.0.3:4515 *:* 6668
> UDP 10.0.0.3:4516 *:* 6668
> UDP 10.0.0.3:4517 *:* 6668
> UDP 10.0.0.3:4518 *:* 6668
> UDP 10.0.0.3:4519 *:* 6668
> UDP 10.0.0.3:4520 *:* 6668
> UDP 10.0.0.3:4521 *:* 6668
> UDP 10.0.0.3:4522 *:* 6668
> UDP 10.0.0.3:4523 *:* 6668
> UDP 10.0.0.3:4524 *:* 6668
> UDP 10.0.0.3:4525 *:* 6668
> UDP 10.0.0.3:4526 *:* 6668
> UDP 10.0.0.3:4527 *:* 6668
> UDP 10.0.0.3:4528 *:* 6668
> UDP 10.0.0.3:4529 *:* 6668
> UDP 10.0.0.3:4530 *:* 6668
> UDP 10.0.0.3:4531 *:* 6668
> UDP 10.0.0.3:4532 *:* 6668
> UDP 10.0.0.3:4533 *:* 6668
> UDP 10.0.0.3:4534 *:* 6668
> UDP 10.0.0.3:4535 *:* 6668
> UDP 10.0.0.3:4536 *:* 6668
> UDP 10.0.0.3:4537 *:* 6668
> UDP 10.0.0.3:4538 *:* 6668
> UDP 10.0.0.3:4539 *:* 6668
> UDP 10.0.0.3:4540 *:* 6668
> UDP 10.0.0.3:4541 *:* 6668
> UDP 10.0.0.3:4542 *:* 6668
> UDP 10.0.0.3:4543 *:* 6668
> UDP 10.0.0.3:4544 *:* 6668
> UDP 10.0.0.3:4545 *:* 6668
> UDP 10.0.0.3:4546 *:* 6668
> UDP 10.0.0.3:4547 *:* 6668
> UDP 10.0.0.3:4548 *:* 6668
> UDP 10.0.0.3:4549 *:* 6668
> UDP 10.0.0.3:4550 *:* 6668
> UDP 10.0.0.3:4551 *:* 6668
> UDP 10.0.0.3:4552 *:* 6668
> UDP 10.0.0.3:4553 *:* 6668
> UDP 10.0.0.3:4554 *:* 6668
> UDP 10.0.0.3:4555 *:* 6668
> UDP 10.0.0.3:4556 *:* 6668
> UDP 10.0.0.3:4557 *:* 6668
> UDP 10.0.0.3:4558 *:* 6668
> UDP 10.0.0.3:4559 *:* 6668
> UDP 10.0.0.3:4560 *:* 6668
> UDP 10.0.0.22:88 *:* 944
> UDP 10.0.0.22:123 *:* 1472
> UDP 10.0.0.22:389 *:* 944
> UDP 10.0.0.22:464 *:* 944
> UDP 10.0.0.22:1718 *:* 496
> UDP 10.0.0.22:1719 *:* 496
> UDP 10.0.0.22:1745 *:* 6668
> UDP 68.145.104.177:88 *:* 944
> UDP 68.145.104.177:123 *:* 1472
> UDP 68.145.104.177:389 *:* 944
> UDP 68.145.104.177:464 *:* 944
> UDP 127.0.0.1:53 *:* 256
> UDP 127.0.0.1:123 *:* 1472
> UDP 127.0.0.1:3027 *:* 1472
> UDP 127.0.0.1:3028 *:* 1472
> UDP 127.0.0.1:3456 *:* 572
> UDP 127.0.0.1:3458 *:* 572
> UDP 127.0.0.1:65421 *:* 256
> UDP 127.0.0.1:65490 *:* 3288
>
>
>ISAInfo run completed at 5/17/2005 10:33:36 PM
>
>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Replacing a server running Windows Server 2003 Jason Brown Windows Server 19 03-28-2009 11:18 AM
Re: W2K domain with W2K8 Terminal Server Bruce Sanderson Windows Server 5 03-13-2009 08:59 PM
Disconnecting Drive Maps over WAN Jesse Pastrano Windows Server 2 04-01-2008 06:23 PM
HELP!! Cannot Find Domain When Logging on to Windows Server 2003 R binarydaddy Windows Server 9 02-19-2008 06:51 PM
Terminal services and login interactively policy Andrew H Windows Small Business Server 19 05-19-2004 08:44 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59