troubleshooting Question

Need help to disable SBS 2003 R2 Standard ICS service

Avatar of bctf1
bctf1 asked on
SBSOS Security
13 Comments1 Solution3241 ViewsLast Modified:
The Windows Firewall/ICS service is running on my SBS 2003 R2 Standard server configured as DC, DHCP server, DNS server, Exchange server, file server) with 1 nic. An Actiontec M1000 dsl gateway/router (dhcp disabled) is the default gateway for the server and workstations which are connected via network switches to the M1000. All workstations are configured DHCP.

If I disable the ICS service on my server it effectively breaks my lan. The server cannot be pinged from any workstation and server shares are not available to any workstation. Also, workstations cannot access the internet but the server can.

I understand that this configuration is basically sharing my server's internet connection for my lan and that the ICS service should not be running on SBS 2003. However, I can't figure out how to disable it without breaking my lan and internet access for my workstations.

I have a feeling that I created this problem myself during the initial SBS configuration. At one point my lan stopped working and I may have changed some group policy settings for ICF and the Windows Firewall. I have attached a couple of screen shots of my current ICF settings and denied GPO's hoping that it might provide a clue how I can disable ICS without breaking my lan. I am unsure what settings to change so I can disable ICS without breaking my lan.

Here is the results of an ipconfig/all from one of the workstations:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\username>ipconfig/all
Windows IP Configuration
        Host Name . . . . . . . . . . . . : computername
        Primary Dns Suffix  . . . . . . . : domainname.local
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : domainname.local
                                            domainname.local

Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . : domainname.local
        Description . . . . . . . . . . . : Intel(R) 82562V-2 10/100 Network Connection
        Physical Address. . . . . . . . . : 00-1D-09-86-D6-0E
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.5.24
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.5.1
        DHCP Server . . . . . . . . . . . : 192.168.5.3
        DNS Servers . . . . . . . . . . . : 192.168.5.3
        Primary WINS Server . . . . . . . : 192.168.5.3
        Lease Obtained. . . . . . . . . . : Saturday, August 02, 2008 9:40:52 AM
        Lease Expires . . . . . . . . . . : Sunday, August 10, 2008 9:40:52 AM

Any and all comments are appreciated.


icfsettings.jpg
deniedgpo.jpg
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 13 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 13 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros