Windows Firewall/Internet Connection Sharing (ICS) - Won'tstay dis

Discussion in 'Windows Small Business Server' started by IT Tech Lady, Feb 24, 2009.

  1. IT Tech Lady

    IT Tech Lady Guest


    We have a Dell server with a problem that I'm unable to resolve easily.
    Every day the Windows Firewall/Internet Connection Sharing (ICS) service is
    set manually by myself to Disabled. Each morning the service changes to
    automatic. Obviously something through the night ismaking the change but I
    have as yet been unable to narrow this down.

    The problem is a problem when it comes to a server reboot - he first time we
    reboot the firewall will stay on! This means no network access for the
    clients. It can sometimes take several reboots to ensure connectivey.

    have run the Microsoft Updas fix relating to the ports in the registry -

    This has not helped.

    Is there a way to turn this service off and keep it off. I have run the RRAS
    wizard to no avail.

    Any help gratefully recieved


    IT Tech Lady, Feb 24, 2009
    1. Advertisements

  2. IT Tech Lady

    SteveB Guest

    Definitely ICS should be disabled. Have you run the SBS BPA to see if it
    flags anything requiring attention?
    SteveB, Feb 24, 2009
    1. Advertisements

  3. IT Tech Lady

    IT Tech Lady Guest


    Run the BPA and the only errors recieved are that the network card driver is
    over 1 year old and SBS monitoring service pack is 2 whereas it should be 4.
    Attempted to update re a command line but message said to use control panel
    instead. I realise SP1 has ICW enabled by default. We are running SP2 hovever
    a reinstall of monitoring from SP1 was performed last year.

    Running Symantec Endpoint protection 11 on the server. Interestingly I did
    notice on one of the logins it did switch on the firewall, I was later unable
    to replicate this.

    Thanks for help
    IT Tech Lady, Feb 25, 2009
  4. IT Tech Lady

    Leythos Guest

    Disable the NETWORK part of the SEPP and see if that helps.

    If you're not running MR4 then you could have issues with SEPP and
    network components - I've seen wireless fail on laptops with SEPP
    installed before MR4.
    Leythos, Feb 25, 2009
  5. IT Tech Lady

    IT Tech Lady Guest

    Hi Leythos,

    Have removed Symantec completely and am still experiencing the problem

    Two services are listed as failing to start

    Microsoft Exchange Event
    Windows Firewall/Internet Connection Sharing (ICS)

    The Windows ICS on we disable every day. We run Acronis Echo True Image for
    SBS on a nightly basis, apart from the usual OS services running this is the
    only program running nightly.

    Where in the registry or group policy can I safetly turn off ICS


    IT Tech Lady, Mar 3, 2009
  6. Hi Susan,

    The Windows Firewall Service should be set to disabled and never be running
    on SBS. If that is something you have to disable every day, something is
    very wrong.
    The Microsoft Exchange Event service should be set to Manual.
    Have you downloaded and run the SBS BPA?


    Marina Roos
    Microsoft SBS-MVP
    One of the Magical M&M's
    Take part in SBS forum:
    Marina Roos [SBS-MVP], Mar 3, 2009
  7. IT Tech Lady

    Leythos Guest

    I'm not sure why ICS was/is enabled, it's not enabled on any of our
    servers. Why not just disable the "Service" so that it can't start.

    You should have ONLY removed the network part, not the entire thing
    (SEPP) and you need to be sure that you've got MR4 when you reinstall.
    Leythos, Mar 3, 2009
  8. IT Tech Lady

    Wishdiak Guest

    I have a similar problem on a client's Dell server running Windows 2003 SBS
    with SP2.

    Each time that the server is rebooted, the Windows Firewall/ICS service is
    set to Automatic but doesn't start. At this point, none of the workstations
    can connect to the server or the internet.

    Changing the Windows Firewall/ICS service back to disabled, executing "netsh
    winsock reset" and rebooting the server again has been a consistent fix each
    time, but I'd really like to find a better solution.

    The server has 2 NIC's, with one disabled, and no AV software currently
    installed. Any help would be appreciated.
    Wishdiak, Mar 31, 2009
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.