Can we really use ipseccmd.exe

[mikhail.mintchenkov]

Hi,

I need to install ipsec policy in my image. How can I do it
automatically?
The usual way is to use mmc. But it requires user intraction, monitor,
keyboard etc....

As I've readed here, ipseccmd,exe can install ipsec policy.
But can we includ it into image? Are any license restriction to include
ipseccmd.exe into image?

Best Regards,
Mikhail Mintchenkov

 

[Guest]

How about *remotely* using the IP Security Policy Management snap-in to
manage the XPe devices? I assume they're going to be networked since you're
asking about IP sec. You'll need to find the required components to enable
IP sec on XPe to be managed remotely through the snap-in.

KS

This posting is provided "AS IS" with no warranties and confers no rights.

 

[mikhail.mintchenkov]

Thank you!

I think it doesn't solve main trouble - additional human made actions
on every device after its first boot. It's hard to do it fro 1.000 and
more devices. :-(

M.M.

 

[mikhail.mintchenkov]

Hi again,

Is it possible to install ipseccmd.exe, use in one step of FBA, and
then remove it using RunOnce command?

M.M.

 

[Zirong Wang]

At least with the contract we have with MS, it is NOT
allowed.

anyway, we do not use ipsec policy, we just use firewall
of SP2, it is enough for us, maybe you can consider using
the firewall if you use SP2.

now, back in the time of SP1 where the firewall was not so
usable/configurable unattended. I used to use the ipsec policy
configuration of a XP PRO, and monitor the registry key
change, then export the reg key, re-inject it on XPe. That did
the thing I wanted. you can also give it a try. use inCtrl5
to monitor the regitry change.

HTH

Zirong

 

[mikhail.mintchenkov]

Zirong ,

Thank you!

Best Regards.
M.M.

 

[KM]

Mikhail,

Do you need to use ipseccmd.exe once or continuously?

If just once you will have no legal problems to initially install the tool on your image, do the required setup and delete it from
there.
As long as you have purchase at least one copy of the Res.Kit this trick should work for you.


Btw, a while ago I saw some tool clones (GUI and command line) in Open Source communities. Search SourceForge or etc.