Solved

How to remove a network bridge from the windows registry

Posted on 2014-02-13
7
2,380 Views
Last Modified: 2014-02-19
I do need to remove a network bridge from a remote windows web server 2008 R2 x64.

The only way I have to do this, is by editing the registry from console.

I cannot use devcon as I haven't been able to find a version which runs on that OS (wrong version error message, i have downloaded 7 diff versions of the utility).

So I have to remove it manually from the registry using reg.exe

There is only one bridge on that system.

Any help is appreciated.
0
Comment
Question by:Kurror
7 Comments
 
LVL 21

Expert Comment

by:dan_blagut
Comment Utility
0
 
LVL 42

Expert Comment

by:Davis McCarn
Comment Utility
You should be able to uninstall it using the built in device manager.  DEVMGMT.MSC
0
 
LVL 20

Expert Comment

by:Radhakrishnan Rajayyan
Comment Utility
Hi,

When you try to access device manager via remote, it won't allow due to "plug and play". You can enable this via GPO and access. Have look at the following procedures;

Log on to the server as a system administrator.
Click Start, Administrative Tools, Group Policy Management.
Expand Forest, Domains, <domain name>,
Right-click the appropriate policy where the server belongs to and click Edit. The Group Policy Management Editor window opens.
Expand Computer Configuration, Policies, Administrative Templates, System and then click Device Installation.
In the right-hand pane, locate 'Allow remote access to the Plug and Play interface'.
Right-click 'Allow remote access to the Plug and Play interface' and select Edit.
Click the Enabled radio button and click OK.
Reboot the server to take effect the new settings and access device manager to delete the network bridge.

If the above method didn't work, please follow the steps and see it works;

Hive: HKEY_LOCAL_MACHINE

Key: SYSTEM\CurrentControlSet\Services\BridgeMP

Value Names: DisableForwarding, DisableSTA

DWORD Values: 0 = default, 1 = disable features
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:Kurror
Comment Utility
Perhaps I didn't make myself clear:

The bridge is causing a switch to block connections because it detects a mac spoofing attack. That is because the DHCP server doesn't have the MAC (in the white list) of one of the adapters bridged.

So till I disable the bridge the connections will be blocked, and I am not able to use RDP and to delete the bridge from the control panel (recursive problem).

I can access to the server via SAC console (command prompt) using a rescue service. So I have to modify the windows registry from this console and modify the registry using the reg utility to prevent the bridge to send the adapter's MAC to the DHCP server (disable/delete the bridge).


 PD: How can I modify the question? I can't find an edit button anywhere.
0
 
LVL 42

Expert Comment

by:Davis McCarn
Comment Utility
0
 

Accepted Solution

by:
Kurror earned 0 total points
Comment Utility
I was able to get a compatible version of the devcon.exe utility for Windows Web Server 2008 R2 (installing windows driver development kit 8.1 - http://msdn.microsoft.com/en-US/en-en/windows/desktop/bg162891.aspx).

With this version I was able to remove the bridge adapter.
0
 

Author Closing Comment

by:Kurror
Comment Utility
I found the solution to the problem downloading a compatible version of the devcon utility.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now