Click here to get back home

Cannot Modify IP Settings
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Cannot Modify IP Settings Will 09-09-2005
Posted by Will on September 9, 2005, 7:48 pm
Please log in for more thread options
 I have a Windows 2000 box where an administrator logged into the box cannot
modify any settings on the Advanced TCP/IP Settings dialog of the active
network adapter. You make changes and hit OK to save, but as soon as you
re-enter all of your changes are lost and the same initial settings are in
place. Some things I tried to change included adding DNS suffixes,
disabling NetBIOS over TCP on the WINS tab, etc.

I assume some security setting has done this? What would prevent even an
administrator from being able to change values on the tabs of this dialog?

--
Will




Posted by Roger Abell [MVP] on September 9, 2005, 11:00 pm
Please log in for more thread options
 W2k allowed very little to be delivered to it for network interface config
from group policy, but the mechanism could be harnessed to directly
zap values in the registry (but that would not give the immediate reset
you are seeing).
Sounds like some sort of system sickness/malware may be at work.

--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
>I have a Windows 2000 box where an administrator logged into the box cannot
> modify any settings on the Advanced TCP/IP Settings dialog of the active
> network adapter. You make changes and hit OK to save, but as soon as you
> re-enter all of your changes are lost and the same initial settings are in
> place. Some things I tried to change included adding DNS suffixes,
> disabling NetBIOS over TCP on the WINS tab, etc.
>
> I assume some security setting has done this? What would prevent even an
> administrator from being able to change values on the tabs of this dialog?
>
> --
> Will
>
>




Posted by Steven L Umbach on September 10, 2005, 12:06 am
Please log in for more thread options
If this is a domain computer logon as the local administrator - not a domain
account in case there are domain level Group Policy settings that may be
causing the problem from user configuration but usually the user would just
get an access denied message. Try running the command ipconfig /all and the
support tool netdiag to see if anything unusual is found and also see if
there are any pertinent events recorded in the system logs of the computer
as shown in Event Viewer. You may also want to try reinstalling tcp/ip on
the computer to see if that makes a difference though that would probably
make the computer get it's IP configuration via DHCP initially so you would
want to jot down any static IP address if one is used in case you need to
reconfigure to static IP. Booting into safe mode with networking may also
be worth a try in case some "protection" software on the computer is
stopping changes from happening. Many malware/spyware/firewall programs are
locking down a lot of computer configuration with or without the computer
users knowledge. --- Steve

http://support.microsoft.com/?id=285034 --- reinstall tcp/ip in W2K Pro.

>I have a Windows 2000 box where an administrator logged into the box cannot
> modify any settings on the Advanced TCP/IP Settings dialog of the active
> network adapter. You make changes and hit OK to save, but as soon as you
> re-enter all of your changes are lost and the same initial settings are in
> place. Some things I tried to change included adding DNS suffixes,
> disabling NetBIOS over TCP on the WINS tab, etc.
>
> I assume some security setting has done this? What would prevent even an
> administrator from being able to change values on the tabs of this dialog?
>
> --
> Will
>
>




Posted by Giuseppe Nacci on September 10, 2005, 9:42 pm
Please log in for more thread options
Will wrote:
> I have a Windows 2000 box where an administrator logged into the box
> cannot modify any settings on the Advanced TCP/IP Settings dialog of
> the active network adapter. You make changes and hit OK to save,
> but as soon as you re-enter all of your changes are lost and the same
> initial settings are in place. Some things I tried to change
> included adding DNS suffixes, disabling NetBIOS over TCP on the WINS
> tab, etc.
>
> I assume some security setting has done this? What would prevent
> even an administrator from being able to change values on the tabs of
> this dialog?

Is this Win 2000 server DC or is it just domain server?
Looking for errors in event viewer and report here "event id" and "source".
Regards
--
---
Giuseppe Nacci
Microsoft Certified System Engineer
Microsoft Certified Trainer
Security Manager





Posted by Will on September 10, 2005, 9:13 pm
Please log in for more thread options
This is a member server. No errors in event viewer corresponding to
network settings or at the time of the event.

--
Will

> Will wrote:
> > I have a Windows 2000 box where an administrator logged into the box
> > cannot modify any settings on the Advanced TCP/IP Settings dialog of
> > the active network adapter. You make changes and hit OK to save,
> > but as soon as you re-enter all of your changes are lost and the same
> > initial settings are in place. Some things I tried to change
> > included adding DNS suffixes, disabling NetBIOS over TCP on the WINS
> > tab, etc.
> >
> > I assume some security setting has done this? What would prevent
> > even an administrator from being able to change values on the tabs of
> > this dialog?
>
> Is this Win 2000 server DC or is it just domain server?
> Looking for errors in event viewer and report here "event id" and
"source".
> Regards
> --
> ---
> Giuseppe Nacci
> Microsoft Certified System Engineer
> Microsoft Certified Trainer
> Security Manager
>
>
>




Similar ThreadsPosted
how to modify ACL for cd-rom and floppy? April 3, 2007, 5:06 am
Apply or modify password policy December 26, 2006, 7:37 pm
Permissions for all of group to read, only creator can modify October 3, 2007, 8:58 pm
how to modify Enterprise RootCA + CertificateTemplates for "EV"-security/green-bar June 27, 2007, 3:10 pm
Modify rights to single file in a directory with only list permiss September 21, 2006, 4:48 pm
W2K3 or W2K8: how to modify Enterprise RootCA + CertificateTemplates for "EV"-security/green-bar July 8, 2007, 6:57 pm
Audit Policy Settings February 8, 2006, 3:46 pm
GPO not picking up computer settings April 6, 2006, 10:37 am
security settings for COM object written in C# June 13, 2005, 1:55 pm
Firewall/security center settings April 4, 2006, 9:15 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap