Doug Knox Please read the following

[BillMadison]

Hi Doug,
An hour ago you posted in response to my question about
my security template being
messed up that you would look it up by installing an XP
pro in virtual PC.
Hope you remember, I posted under the name Bill
Madison....

Enfin,...just wanted to let you know that I found the
problem, when I encounter a
problem I do occasionaly post to MS forums but that does
not mean that I myself stop
looking for an answer and instead on relying on other
people I try to look at all
options.
What I found out was the following...I looked at where
windows stores these settings
that get registered and came to following keys in the
registry :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\SeCEdit\Reg Values
I came upon this by carefully copying and pasting the inf
additions in the XP guide
and reregistering the dll and looking when it went wrong.

For instance when I added following reg keys with the
additional string keys :
;MACHINE\System\CurrentControlSet\Services\Tcpip\Parameter
s\DisableIPSourceRouting,4,%DisableIPSourceRouting%,3,0|%
DisableIPSourceRouting0%,1|%DisableIPSourceRouting1%,2|%
DisableIPSourceRouting2%
;MACHINE\System\CurrentControlSet\Services\Tcpip\Parameter
s\TcpMaxConnectResponseRetransmissions,4,%
TcpMaxConnectResponseRetransmissions%,3,0|%
TcpMaxConnectResponseRetransmissions0%,1|%
TcpMaxConnectResponseRetransmissions1%,2|%
TcpMaxConnectResponseRetransmissions2%,3|%
TcpMaxConnectResponseRetransmissions3%
MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
\TcpMaxDataRetransmissions,4,%TcpMaxDataRetransmissions%,1
it messed up my security options page and resulted in not
showing any values.
When I for instance deleted the value
(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\SeCEdit\Reg
Values\MACHINE/System/CurrentControlSet/Services/Tcpip/Par
ameters/TcpMaxDataRetransmissions) in the registry under
the Secedit REG key my
security options page mysteriously popped back up and I
was again able to see my
settings.

I dont know if this is with all XP versions but I am
appauled that MS would release
such a guide with these settings that would result in a
user not being able to gain
access to its settings anymore through the MMC security
snapin.

Again, I used these same settings on my 2000 box without
any problems so apparently
there is nothing wrong with these registry keys but more
the implementation it has
when used on XP. (funny though that they did include this
in the XP guide)
Also I noticed some buggy behaviour that I didnt
encounter on 2000.
When in 2000 there isnt already a key in the registry
called for instance
"Synattackprotect" and you add it through this policy
using the inf file you can freely adjust
it and it will create the key.

In XP however when this key initially doesnt exist in the
registry and you use the
inf file method then it will import this setting in the
security options page but it
will result in you being unable to set it and will remain
grayed out until you
physically create the key in the registry. Big YAWN :-(

I know MS can do better but please, have they even tested
out these settings on XP?

Kind Regards,
Jan

PS : Maybe you can test it on virtual PC and see if you
get the same error in not
being able to see the settings. I would definitely like
to know if you also encounter
this error.
Let me know what you make of this.

 

[Michael Stevens]

Hi Doug,
An hour ago you posted in response to my question about
my security template being
messed up that you would look it up by installing an XP
pro in virtual PC.
Hope you remember, I posted under the name Bill
Madison....

Bill,
You should always post back to the original thread rather than start a new
one. It makes for a more coherent progression.
Set up a newsreader to make it easier to browse the messages.
See the link in my signature for tips to set up OE.

--

Michael Stevens MS-MVP XP
(e-mail address removed)
http://michaelstevenstech.com
For a better newsgroup experience. Setup a newsreader.
http://michaelstevenstech.com/outlookexpressnewreader.htm

 

[Doug Knox MS-MVP]

Hi Jan,

Thanks for the information, and for taking the time and effort to continue troubleshooting this on your own. I'll perform the test later today and post back with the results. If I find the same issue, I'll escalate it with my contacts at MS to find out why it happens, if possible, and get it corrected, again, if possible.