Windows: The IPSec driver has entered Block mode

Problem 1
The Internet Authentication Service (IAS) does not start, and an Error event that resembles the following is logged in the System event log

The Internet Authentication Service service terminated with the following error: Only one usage of each socket address (protocol/network address/port) is normally permitted.

Problem 2
Microsoft Exchange Server Always Up To Date (AUTD) notifications for ActiveSync fail, and Error events that resemble the following are logged in the Application event log:

IP-based AUTD failed to initialize because the processing of notifications could not be set up. Error code [0x80004005]. Verify that no other applications are currently bound to UDP port [2883], or try specifying a different port number

IP-based AUTD failed to initialize. Error code: [0x80004005].


Problem 3
The IPSEC Services service does not start, and Error events that resemble the following are logged in the

The IPSec driver has entered Block mode. IPSec will discard all incoming and outgoing TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions. User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and then restart the computer. For detailed troubleshooting information, review the events in the Security event log.

The IPSEC Services service terminated with the following error: Only one usage of each socket address (protocol/network address/port) is normally permitted.


RESOLUTION

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Right-click ReservedPorts, and then click Modify.

Type the range of ports that you want to reserve:


1645-1646 IAS
1701-1701 L2TP
1718-1719 H.323 Gatekeeper (ISA 2000 only)
1745-1745 ISA Server 2000 or ISA Server 2004
1812-1813 IAS
2883-2883 AUTD
3500-3619 ISA Server 2000 only
4500-4500 IPSEC

Comments

Post a Comment

Popular posts from this blog

How to make exrernal USB HDD available to the Synology Media center

1. Use ln command to create a symlink inside of the /volume1/video/ folder to point to     USB HDD /volumeUSB#/usbshare     (Note ensure what your USB number is first)      ln -s /volumeUSB#/usbshare /volume1/video/usbdrive     Ex: ln -s /volumeUSB2/usbshare /volume1/video/usbdrive     In case you ever want to remove your link use command below:      rm <linkname> 2. Re-Index media via Synology interface. Done.     Can also use mount but more hassle:      mount --bind /volumeUSB1/usbshare /volume1/video/usbdrive      unmount      mount /volume1/video/usbdrive      art up scripts *.sh located here:          sr/syno/etc/rc.d
Read more

How to loop "ipconfig /renew" until it gets IP address on remote PC to test DHCP using PowerShell

The script below will loop until it received IP address from DHCP server.  If id does not receive IP it will loop indefinitely or until you stop manually or reboot PC.  I used this script on remote PC, while it had and IP address but I needed to test if DHCP server is working or could reach client via site-to-site VPN.  If PC did not come up I knew I had to fix VPN or server, etc.  1. Open command prompt by right-clicking on the "command prompt" or PowerShell icon and select "Run as administrator" 2. If you open command prompt, type PowerShell to start power shell    Microsoft Windows [Version 10.0.18362.535]   (c) 2019 Microsoft Corporation. All rights reserved.   C:\WINDOWS\system32> powershell   Windows PowerShell   Copyright (C) Microsoft Corporation. All rights reserved. 3. Run these two command and save the computer name and domain name for later, we might need it.     PS C:\WINDOWS\system32> $env:computername     MYPC-TEST
Read more

When users is trying to open PDF file from the internet using browser he gets following error message - Problem (1:1)

Image
SYMPTOMS When users is trying to open PDF file from the internet using browser he gets following error message: Title: Adobe PDF Document Error:       There is a problem with Adobe Acrobat/Reader.       If it is running, please exit and try again. (1:1)        Simple way to test is to point browser to any online PDF link.  RESOLUTION The required registry key is missing or does not have correct permissions set. 1. Login to a server or user's PC that has this problem 2. Open registy editor: Click  Start \ Run Type  regedit  and click ok 3. Browse to HKEY_CLASSES_ROOT\Software  4. Verify if  Adobe\Acrobat\Exe  key exists. 5. If it exists skip to step 6 otherwise follow inscructions below to create one 5.1 Right click on Software, New, Key 5.2 Type  Adobe  and hit enter 5.3 Right click on Adobe, New, Key 5.4 Type  Acrobat  and hit enter 5.5 Right click on Acrobat, New, Key 5.6 Type  Exe  and hit enter 5.7 Click on Exe and double click on (Default)
Read more