Detecting/Disabling ICS in a Startup script

[Geoff]

I was having a look why one of the teachers laptops at a primary school we support couldn't get on the network correctly. I did the usual checks for secure channel certificate errors, DNS, time etc. However none of these proved to be the problem. Actually the cause was that ICS was enabled!

Does anyone have a script to detect and/or disable ICS at machine startup/user login? So I can prevent this sort of thing in future.

[greenfieldsupport]

Just stick in the logon script.

NET STOP "Windows Firewall/Internet Connection Sharing (ICS)"

crude but it'll work

This is on a windows XP machine yes??

It would be differnt if it was server.



Hope this helps

[mac_shinobi]

https://my.infotex.com/filemgmt_data/files/ICS.vbs

Let us know how it goes and what you end up doing.

Thanks

[Geoff]

Thanks everyone. I'll give it a go.

[srochford]

I was having a look why one of the teachers laptops at a primary school we support couldn't get on the network correctly. I did the usual checks for secure channel certificate errors, DNS, time etc. However none of these proved to be the problem. Actually the cause was that ICS was enabled!

Does anyone have a script to detect and/or disable ICS at machine startup/user login? So I can prevent this sort of thing in future.

Is this running AD? If so, you can use a group policy - in the computer section, look for Windows Settings, Security Settings, System services and change the service type to disabled.

Alternatively, you could use the sc command to disable the service (so you don't have to stop it each time)

[Geoff]

Infact, I found there's an even better way. In group policy go to:

Computer Configuration\Administrative Templates\Network\Network Connections.

Change the settings:

Prohibit use of Internet Connection Sharing on your DNS domain network
Prohibit installation and configuration of Network Bridge on your DNS domain network

The beauty of this is that it still allows the teacher to use ICS at home (because the DNS domain network name is different).