Printable View
I was having a look why one of the teachers laptops at a primary school we support couldn't get on the network correctly. I did the usual checks for secure channel certificate errors, DNS, time etc. However none of these proved to be the problem. Actually the cause was that ICS was enabled!
Does anyone have a script to detect and/or disable ICS at machine startup/user login? So I can prevent this sort of thing in future.
Just stick in the logon script.
NET STOP "Windows Firewall/Internet Connection Sharing (ICS)"
crude but it'll work :D
This is on a windows XP machine yes??
It would be differnt if it was server.
:)
Hope this helps
https://my.infotex.com/filemgmt_data/files/ICS.vbs
Let us know how it goes and what you end up doing.
Thanks
Thanks everyone. I'll give it a go. :)
Is this running AD? If so, you can use a group policy - in the computer section, look for Windows Settings, Security Settings, System services and change the service type to disabled.Quote:
Originally Posted by Geoff
Alternatively, you could use the sc command to disable the service (so you don't have to stop it each time)
Infact, I found there's an even better way. In group policy go to:
Computer Configuration\Administrative Templates\Network\Network Connections.
Change the settings:
Prohibit use of Internet Connection Sharing on your DNS domain network
Prohibit installation and configuration of Network Bridge on your DNS domain network
The beauty of this is that it still allows the teacher to use ICS at home (because the DNS domain network name is different).