Anyone know how to untick (or disable) items in the inside the properties of a Network Connection via a registry modification?
In our domain we are using Lumension Sanctuary Device Control for controlling access to any peripheral end-user devices. It's working quite well, apart from the fact that it also installs an item in the list of items inside the properties of all network connections of a PC. This item is called SK-NDIS, and is located in the list alongside "Client for Microsoft Networks" and "Internet Protocol TCP/IP".
Now, SK-NDIS has been causing us a whole host of problems. It sometimes prevents our Wi-fi cards from connecting - the connecting status stays on "Acquiring network address" indefinitely. Unticking SK-NDIS solves this problem. Another problem we have is that SK-NDIS really slows down the link speed of our LAN clients. Users complain that since we have installed Sanctuary, network applications have slowed noticeably, and unticking SK-NDIS speeds things back up.
Now, we only want Sanctuary to affect connections within a PC, not between them, so my question is, how do I disable this via Group Policy, bearing in mind that we have 2000 PCs on our domain.
I was thinking of deploying some kind of registry modification via batch file as a Startup script.
Anyone know how this could be done in the registry?
If it helps anyone, SK-NDIS has a registry entry at
HKLM\System\CurrentControl
with subkeys Enum, Parameters and Security.
Thanks.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
In the end I installed a free trial of RegSnap and took a snapshot of the registry with it ticked and then unticked. Inattowed it down to the reg key
HKLM\System\CurrentControl
I probably won't be able to push this out with group policy because the registry item probably holds a lot of info about a lot of other things.
Anyone else have any suggestion on how to help me?
SKNDIS (Sanctuary Kernel Network Driver Interface Specification) is a filter driver that hooks onto ALL network cards, physical or virtual, the card itself and its miniport. So each card will show and SKNDIS and/or an SKNDIS MP entry added. (show hidden devices in the Hardware manager of Windows will reveal them)
It is required to control wireless cards on the fly and was introduced in v4.1.2 (it controls the IP stack for interfaces). It should however not interfere given the permissions are right. When it is instructed to block, it will not block the card but will disable the IP stack of that card instead.
In fact, if you do not install SKNDIS then any permissions regarding Wireless NICs, Bluetooth and IrDA devices will not work (you could not control them).
It is in the 4.4 version where the choice to install or not SKNDIS has been implemented.
Business Accounts
Answer for Membership
by: Oliver-PPosted on 2009-07-23 at 04:37:22ID: 24923921
Hi,
You can usually find where the key is located with Regmon from Microsoft/Sysinternals: http://technet.microsoft.c
Run Regmon > Open your LAN connexion properties and disable SK-NDIS > OK
Now look in the Regmon windows and do a search.