ipnat.sys firewall and RDC

Hi All,
I have replaced Win2003 server in a remote branch.
I can not RDC or use the mstsc command to connect to the remote machine.
The GP allows my subnet to remote admin and rdc to the machine. I can do
everything else - GPMC connection, DNS connection etc, all is good - except
RDC.

Telneting to the machine I can run commands, so I have tried (amongst other
things)...
Running... netsh firewall show state
Gives... The service has not started

So I... netsh firewall set opmode enable
And get... Windows firewall cannot run because another program or service is
running that might use the network address translation component <ipnat.sys>

At this point I will point out that no NAT is used on this server...

Then I... sc query ipnat
And I get the response that ipnat is "stopped"

So I go round in circles...
Can anyone tell me why the firewall is not starting up at boot, and what can
ipnat.sys have to do with it?
What might be using ipnat.sys that is stopping the firewall from starting -
is this something I can turn off?

I only want to RDC to a machine I have total control over in every other
way...

TIA
cSa

Hi,
Can you check if RRAS is configured on the machine?
Open the RRAS console( Start --> Run --> rrasmgmt.msc)

If RRAS is configured then that is the reason why firewall is not starting.
Disable RRAS(Righclick <machine node> --> Disable Routing and Remote Access)
and then try starting firewall.

--
Thanks,
Janani
---------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."

"cSa" <(E-Mail Removed)> wrote in message
news:B0EE8C09-EA0F-445C-8988-(E-Mail Removed)...
> Hi All,
> I have replaced Win2003 server in a remote branch.
> I can not RDC or use the mstsc command to connect to the remote machine.
> The GP allows my subnet to remote admin and rdc to the machine. I can do
> everything else - GPMC connection, DNS connection etc, all is good -
> except
> RDC.
>
> Telneting to the machine I can run commands, so I have tried (amongst
> other
> things)...
> Running... netsh firewall show state
> Gives... The service has not started
>
> So I... netsh firewall set opmode enable
> And get... Windows firewall cannot run because another program or service
> is
> running that might use the network address translation component
> <ipnat.sys>
>
> At this point I will point out that no NAT is used on this server...
>
> Then I... sc query ipnat
> And I get the response that ipnat is "stopped"
>
> So I go round in circles...
> Can anyone tell me why the firewall is not starting up at boot, and what
> can
> ipnat.sys have to do with it?
> What might be using ipnat.sys that is stopping the firewall from
> starting -
> is this something I can turn off?
>
> I only want to RDC to a machine I have total control over in every other
> way...
>
> TIA
> cSa

Thanks for that...

I actually did already find this to be the case.
I had static routes in for the extended network, and this made the firewall
not work - so the RDC settings were irrelevant and so I was unable to get to
the machine via RDC.
Removing the static routes and then disabling RRAS did indeed work.

Is this a design to have the firewall turn off when you give additional
static routes???

"Janani [MSFT]" wrote:

> Hi,
> Can you check if RRAS is configured on the machine?
> Open the RRAS console( Start --> Run --> rrasmgmt.msc)
>
> If RRAS is configured then that is the reason why firewall is not starting.
> Disable RRAS(Righclick <machine node> --> Disable Routing and Remote Access)
> and then try starting firewall.
>
> --
> Thanks,
> Janani
> ---------------------------------------------------------------------------
> "This posting is provided "AS IS" with no warranties, and confers no
> rights."
>
> "cSa" <(E-Mail Removed)> wrote in message
> news:B0EE8C09-EA0F-445C-8988-(E-Mail Removed)...
> > Hi All,
> > I have replaced Win2003 server in a remote branch.
> > I can not RDC or use the mstsc command to connect to the remote machine.
> > The GP allows my subnet to remote admin and rdc to the machine. I can do
> > everything else - GPMC connection, DNS connection etc, all is good -
> > except
> > RDC.
> >
> > Telneting to the machine I can run commands, so I have tried (amongst
> > other
> > things)...
> > Running... netsh firewall show state
> > Gives... The service has not started
> >
> > So I... netsh firewall set opmode enable
> > And get... Windows firewall cannot run because another program or service
> > is
> > running that might use the network address translation component
> > <ipnat.sys>
> >
> > At this point I will point out that no NAT is used on this server...
> >
> > Then I... sc query ipnat
> > And I get the response that ipnat is "stopped"
> >
> > So I go round in circles...
> > Can anyone tell me why the firewall is not starting up at boot, and what
> > can
> > ipnat.sys have to do with it?
> > What might be using ipnat.sys that is stopping the firewall from
> > starting -
> > is this something I can turn off?
> >
> > I only want to RDC to a machine I have total control over in every other
> > way...
> >
> > TIA
> > cSa
>
>
>

Hi,
The behaviour in SP1 is to have firewall stopped and disabled when RRAS
is configured, else RRAS cannot be configured.

--
Thanks,
Janani
---------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."

"cSa" <(E-Mail Removed)> wrote in message
news:446944A5-2286-4714-99AF-(E-Mail Removed)...
> Thanks for that...
>
> I actually did already find this to be the case.
> I had static routes in for the extended network, and this made the
> firewall
> not work - so the RDC settings were irrelevant and so I was unable to get
> to
> the machine via RDC.
> Removing the static routes and then disabling RRAS did indeed work.
>
> Is this a design to have the firewall turn off when you give additional
> static routes???
>
> "Janani [MSFT]" wrote:
>
>> Hi,
>> Can you check if RRAS is configured on the machine?
>> Open the RRAS console( Start --> Run --> rrasmgmt.msc)
>>
>> If RRAS is configured then that is the reason why firewall is not
>> starting.
>> Disable RRAS(Righclick <machine node> --> Disable Routing and Remote
>> Access)
>> and then try starting firewall.
>>
>> --
>> Thanks,
>> Janani
>> ---------------------------------------------------------------------------
>> "This posting is provided "AS IS" with no warranties, and confers no
>> rights."
>>
>> "cSa" <(E-Mail Removed)> wrote in message
>> news:B0EE8C09-EA0F-445C-8988-(E-Mail Removed)...
>> > Hi All,
>> > I have replaced Win2003 server in a remote branch.
>> > I can not RDC or use the mstsc command to connect to the remote
>> > machine.
>> > The GP allows my subnet to remote admin and rdc to the machine. I can
>> > do
>> > everything else - GPMC connection, DNS connection etc, all is good -
>> > except
>> > RDC.
>> >
>> > Telneting to the machine I can run commands, so I have tried (amongst
>> > other
>> > things)...
>> > Running... netsh firewall show state
>> > Gives... The service has not started
>> >
>> > So I... netsh firewall set opmode enable
>> > And get... Windows firewall cannot run because another program or
>> > service
>> > is
>> > running that might use the network address translation component
>> > <ipnat.sys>
>> >
>> > At this point I will point out that no NAT is used on this server...
>> >
>> > Then I... sc query ipnat
>> > And I get the response that ipnat is "stopped"
>> >
>> > So I go round in circles...
>> > Can anyone tell me why the firewall is not starting up at boot, and
>> > what
>> > can
>> > ipnat.sys have to do with it?
>> > What might be using ipnat.sys that is stopping the firewall from
>> > starting -
>> > is this something I can turn off?
>> >
>> > I only want to RDC to a machine I have total control over in every
>> > other
>> > way...
>> >
>> > TIA
>> > cSa
>>
>>
>>