Hello,
1- Windows Firewall is off
2- I didn't see any Security Wizard... How would I run it?
3- It is statis and, yes, it can ping its own network IP address
4- This server does not run ISA...
Thanks for your help!
Syl
Main Topics
Browse All TopicsHello,
After installing Service Pack 1 on my Windows Server 2003, the server does not communicate anymore with the rest of my network. This server is a DC. Here's what happens:
During the startup process, the server is "pingable" for a short period of time. Then, there's a window that pops-up saying that "At least one service or driver failed during system startup. Use event viewer to examine the event log for details." At that point, the server acts like it's offline.
I checked the device manager and my network card status is ok. Windows even tells me that the card is connected to the network. Pinging 127.0.0.1 works.
After examining the event viewer, here's what I found:
Event ID: 4292
Source: IPSec
Type: Error
Description: The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions. User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and the restart the computer. For detailed troubleshooting information, review the events in the Security event log.
Event ID: 7023
Source: Service Control Manager
Type: Error
Description: The IPSEC Services service terminated with the following error: The system cannot find the file specified.
When I look in the services window, I see that the IPSEC Services is stopped. When I try to start it, I get a pop-up saying "Could not start the IPSEC Services service on Local Computer. Error 2: The system cannot find the file specified."
I don't want to disable the IPSec services as suggested in the first error description. I have another Windows Server 2003 SP1 (another DC), and the IPSec service is working fine.
I tried to remove the NIC from the device manager and I rebooted to reinstall it. I tried rebuilding the TCP/IP stack (netsh int ip reset). I tried repairing Winsock (netsh winsock reset). I tried scanning the Windows protected file (sfc /scannow). The only thing that kinda solved my problem was uninstalling SP1. Of course, that is not really an option...
Thanks for your help!
Syl
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
gsgi: powerchute is not installed on that computer.
bbao: the event ID 4292 appears first, then the 7023. They appear in the System event log. I checked the application log, there are 3 errors, they appear between the event 4292 and 7023.
First...
Event ID: 1097
Source: Userenv
Type: Error
Description: Windows cannot find the machine account. No authority could be contacted for authentication.
Then...
Event ID: 1030
Source: Userenv
Type: Error
Description: Windows cannot query the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
Finally...
Event ID: 1054
Source: Userenv
Type: Error
Description: Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted). Group policy precessing aborted.
Thanks for you help!
Syl
I listed these as I thought of them, maybe check 3, then 5, then 4, then 1, then 2. sorry - gsgi
1. You might try http://www.spychecker.com/
2. You might try uninstalling sp1 and reinstalling sp1
3. It is possible that it is a simple as you nic came up disabled in network settings
4. It is possible that sp1 loaded a new driver for your nic - can you run nic utils
5. This usenet article says to add "Client for Microsoft Network"
http://groups-beta.google.
gsgi:
1: After running this utility and rebooting, the problem is still there
2: I did uninstall and reinstall SP1 and the problem is still there
3: My nic is enabled in the network settings
4: I reinstalled my old nic driver (even though SP1 didn't replace it) and the problem is still there
5: "Client for Microsoft Network" is already installed
how about the solution link at the bottom of this http://www.experts-exchang
Business Accounts
Answer for Membership
by: MikeKanePosted on 2005-08-12 at 09:54:25ID: 14662517
Just a few quick thoughts....
1) Sp1 has a Windows firewall, just like XP SP2, please make sure it's still OFF, should be by default, but check anyway.
2) Have you run the Security Wizard that comes with SP1?
3) You mentioned you could ping 127.0.0.1, can you ping its own network IP address? May I assume this is a static IP? If it's DHCP assigned, you should really but the DC as a static IMHO.
4) I've read about issues with 2003 SP1 and ISA server issues. Do you run ISA on this host?