Kurror
asked on
How to remove a network bridge from the windows registry
I do need to remove a network bridge from a remote windows web server 2008 R2 x64.
The only way I have to do this, is by editing the registry from console.
I cannot use devcon as I haven't been able to find a version which runs on that OS (wrong version error message, i have downloaded 7 diff versions of the utility).
So I have to remove it manually from the registry using reg.exe
There is only one bridge on that system.
Any help is appreciated.
The only way I have to do this, is by editing the registry from console.
I cannot use devcon as I haven't been able to find a version which runs on that OS (wrong version error message, i have downloaded 7 diff versions of the utility).
So I have to remove it manually from the registry using reg.exe
There is only one bridge on that system.
Any help is appreciated.
You should be able to uninstall it using the built in device manager. DEVMGMT.MSC
Hi,
When you try to access device manager via remote, it won't allow due to "plug and play". You can enable this via GPO and access. Have look at the following procedures;
Log on to the server as a system administrator.
Click Start, Administrative Tools, Group Policy Management.
Expand Forest, Domains, <domain name>,
Right-click the appropriate policy where the server belongs to and click Edit. The Group Policy Management Editor window opens.
Expand Computer Configuration, Policies, Administrative Templates, System and then click Device Installation.
In the right-hand pane, locate 'Allow remote access to the Plug and Play interface'.
Right-click 'Allow remote access to the Plug and Play interface' and select Edit.
Click the Enabled radio button and click OK.
Reboot the server to take effect the new settings and access device manager to delete the network bridge.
If the above method didn't work, please follow the steps and see it works;
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\S
Value Names: DisableForwarding, DisableSTA
DWORD Values: 0 = default, 1 = disable features
When you try to access device manager via remote, it won't allow due to "plug and play". You can enable this via GPO and access. Have look at the following procedures;
Log on to the server as a system administrator.
Click Start, Administrative Tools, Group Policy Management.
Expand Forest, Domains, <domain name>,
Right-click the appropriate policy where the server belongs to and click Edit. The Group Policy Management Editor window opens.
Expand Computer Configuration, Policies, Administrative Templates, System and then click Device Installation.
In the right-hand pane, locate 'Allow remote access to the Plug and Play interface'.
Right-click 'Allow remote access to the Plug and Play interface' and select Edit.
Click the Enabled radio button and click OK.
Reboot the server to take effect the new settings and access device manager to delete the network bridge.
If the above method didn't work, please follow the steps and see it works;
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\S
Value Names: DisableForwarding, DisableSTA
DWORD Values: 0 = default, 1 = disable features
ASKER
Perhaps I didn't make myself clear:
The bridge is causing a switch to block connections because it detects a mac spoofing attack. That is because the DHCP server doesn't have the MAC (in the white list) of one of the adapters bridged.
So till I disable the bridge the connections will be blocked, and I am not able to use RDP and to delete the bridge from the control panel (recursive problem).
I can access to the server via SAC console (command prompt) using a rescue service. So I have to modify the windows registry from this console and modify the registry using the reg utility to prevent the bridge to send the adapter's MAC to the DHCP server (disable/delete the bridge).
PD: How can I modify the question? I can't find an edit button anywhere.
The bridge is causing a switch to block connections because it detects a mac spoofing attack. That is because the DHCP server doesn't have the MAC (in the white list) of one of the adapters bridged.
So till I disable the bridge the connections will be blocked, and I am not able to use RDP and to delete the bridge from the control panel (recursive problem).
I can access to the server via SAC console (command prompt) using a rescue service. So I have to modify the windows registry from this console and modify the registry using the reg utility to prevent the bridge to send the adapter's MAC to the DHCP server (disable/delete the bridge).
PD: How can I modify the question? I can't find an edit button anywhere.
Try WMIC in a CMD promt: http://stackoverflow.com/questions/19021466/disabling-ethernet-connection-with-command-line
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I found the solution to the problem downloading a compatible version of the devcon utility.
Here you have some info about
http://www.stigviewer.com/check/V-15667
http://www.windowsnetworking.com/kbase/WindowsTips/Windows7/RegistryTips/Miscellaneous/ChangeNetworkBridgeSettings.html
good luck
Dan