1

Topic: Win7: it is not possible to disconnect lock of connections/packages completely

After system preferences at once forbade start of service Server and of some others, responsible for , and one and a half year safely lived without them. Now it was required to launch cmd/FAR under Local System, and about whists it is possible only through remote access (psexec, remote and other). For this purpose it is required, that it was accessible a full-sphere admin $. Launched all services - a full-sphere "far off" (through \\<host> \admin $) does not open, psexec with own service cannot communicate. In Computer Management / Shared Folders all full-spheres open, in Network the folder "Users" is visible  and at attempt of network access (through Network or the prefix "\\") does not open anything ("network path was not found"). The suspicion fell on Firewall - disconnected on all three profiles, but exchanged nothing. Then for the sake of interest glanced in Security Log (access audit there is included) - there messages "Windows Filtering Platform has blocked a connection/packet" where figures svchost regularly fall. For all other processes/services access to a network is not restricted. Tried to create in Inbound and Outbound the rules, resolving all and everything, to switch all default with Block on Allow, to stop/restart Windows services Firewall and Base Filtering Platform - changes nothing. Probably, business in something the friend, but me strongly is confused with these regular messages on connection/package lock. How to force the filter to pass all without restrictions?

2

Re: Win7: it is not possible to disconnect lock of connections/packages completely

Hello, Evgenie Muzychenko, you wrote: I eat> Probably, business in something the friend, but I am am confused strongly with these regular messages on connection/package lock. How to force the filter to pass all without restrictions? It is necessary to accept an axiom - never to disconnect Windows Firewall. (It and so full of holes.) It is necessary to pass someone - to add and include a rule. Rules work. Both allowing, and prohibitive whoever that drove. With w2k on mine it is necessary to use names with passwords if open authorization, either the domain, or identical names at stations with identical passwords is necessary. Such *.reg c 7 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] "LocalAccountTokenFilterPolicy" =dword:00000001 it allows to be connected to names with $. If network shares are inaccessible by name, it is necessary to check DNS (nslookup), or to use IP addresses instead of names. Or to register in localhost the necessary.... <<RSDN@Home 1.0.0 alpha 5 rev. 0>>

3

Re: Win7: it is not possible to disconnect lock of connections/packages completely

Hello, akasoft, you wrote: A> It is necessary to accept an axiom - never to disconnect Windows Firewall. (It and so full of holes.) It is necessary to pass someone - to add and include a rule. A> rules work. Both allowing, and prohibitive whoever that drove. In that also put that they work "in general", and here achieve the full elimination of messages on lock in broad gulls I cannot neither rules, nor a blackout (which already from a hopelessness). A> With w2k on mine it is necessary to use names with passwords Yes let it to begin with reaches a resource and tells that the password is required, or access is forbidden, or still something. While it cannot find a resource at all. A> "LocalAccountTokenFilterPolicy" =dword:00000001 about this  I read, but in normally tuned system it is not required. At me is  with the same version Win7 unless with other configuration of updates - there all perfectly works. Now I first of all want to define the problem reason, instead of to try crutches at random. A> If network shares are inaccessible by name, it is necessary to check DNS (nslookup), or to use IP addresses instead of names. DNS the host name , through IP addresses too does not work. And nevertheless how to force network filters to pass all traffic without restrictions to be convinced, what matter is not in them?

4

Re: Win7: it is not possible to disconnect lock of connections/packages completely

Hello, Evgenie Muzychenko, you wrote: I eat> And nevertheless how to force network filters to pass all traffic without restrictions, to be convinced, what matter is not in them? You create a rule, you set there ports, resolution, you include a rule, telnet it is connected, you ungear a rule, telnet normally breaks off, but the guaranteed regional ohm needs a prohibitive rule. Somehow so. And the network type (private, the general, domain) is specified? The profile depends on it corrected.... <<RSDN@Home 1.0.0 alpha 5 rev. 0>>

5

Re: Win7: it is not possible to disconnect lock of connections/packages completely

Hello, akasoft, you wrote: A> you Create a rule, you set there ports, resolution, you include a rule, telnet it is connected, you ungear a rule, telnet normally breaks off, but the guaranteed regional ohm needs a prohibitive rule. Somehow so. And the network type (private, the general, domain) is specified? The profile depends on it corrected. I am so similar on the full teapot, or to you laziness attentively to read the first message? If there is nothing to tell in essence - keep silent is better.