IPSec monitor snap-in
in [Windows XP Basics]
|
Prev: yahoo's email window
Next: Dvd decoder
From: William B. Lurie on 2 Mar 2010 07:33 I find the following failure repeatedly in my Event Monitor. Could someone lead me to its resolution? Thank you. Event Type: Failure Audit Event Source: Security Event Category: Policy Change Event ID: 615 Date: 3/2/2010 Time: 6:51:08 AM User: NT AUTHORITY\NETWORK SERVICE Computer: COMPAQ-2006 Description: IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
From: William B. Lurie on 2 Mar 2010 10:39 William B. Lurie wrote: > I find the following failure repeatedly in my Event Monitor. > Could someone lead me to its resolution? Thank you. > > Event Type: Failure Audit > Event Source: Security > Event Category: Policy Change > Event ID: 615 > Date: 3/2/2010 > Time: 6:51:08 AM > User: NT AUTHORITY\NETWORK SERVICE > Computer: COMPAQ-2006 > Description: > IPSec Services: IPSec Services failed to get the complete list of > network interfaces on the machine. This can be a potential security > hazard to the machine since some of the network interfaces may not get > the protection as desired by the applied IPSec filters. Please run IPSec > monitor snap-in to further diagnose the problem. > > > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. ******************************************************* I searched and found, downloaded, and installed IPSec Diagnostic Tool. I executed it, but it told me nothing and gave no report........ What's next?
From: John John - MVP on 2 Mar 2010 12:15 William B. Lurie wrote: > I find the following failure repeatedly in my Event Monitor. > Could someone lead me to its resolution? Thank you. > > Event Type: Failure Audit > Event Source: Security > Event Category: Policy Change > Event ID: 615 > Date: 3/2/2010 > Time: 6:51:08 AM > User: NT AUTHORITY\NETWORK SERVICE > Computer: COMPAQ-2006 > Description: > IPSec Services: IPSec Services failed to get the complete list of > network interfaces on the machine. This can be a potential security > hazard to the machine since some of the network interfaces may not get > the protection as desired by the applied IPSec filters. Please run IPSec > monitor snap-in to further diagnose the problem. XP Home or XP Pro? Is the machine part of a network or is it a stand alone? Do you VPN into a server with this machine? John
From: William B. Lurie on 2 Mar 2010 13:50 John John - MVP wrote: > William B. Lurie wrote: >> I find the following failure repeatedly in my Event Monitor. >> Could someone lead me to its resolution? Thank you. >> >> Event Type: Failure Audit >> Event Source: Security >> Event Category: Policy Change >> Event ID: 615 >> Date: 3/2/2010 >> Time: 6:51:08 AM >> User: NT AUTHORITY\NETWORK SERVICE >> Computer: COMPAQ-2006 >> Description: >> IPSec Services: IPSec Services failed to get the complete list of >> network interfaces on the machine. This can be a potential security >> hazard to the machine since some of the network interfaces may not get >> the protection as desired by the applied IPSec filters. Please run >> IPSec monitor snap-in to further diagnose the problem. > > XP Home or XP Pro? Is the machine part of a network or is it a stand > alone? Do you VPN into a server with this machine? > > John See my later message about IPSec, John. I tried the test and got no results at all. It is XP Home/SP2 (SP3 is the same). It is a one-user-desktop, hardwired to Ethernet/DSL line.
From: John John - MVP on 2 Mar 2010 15:10
William B. Lurie wrote: > John John - MVP wrote: >> William B. Lurie wrote: >>> I find the following failure repeatedly in my Event Monitor. >>> Could someone lead me to its resolution? Thank you. >>> >>> Event Type: Failure Audit >>> Event Source: Security >>> Event Category: Policy Change >>> Event ID: 615 >>> Date: 3/2/2010 >>> Time: 6:51:08 AM >>> User: NT AUTHORITY\NETWORK SERVICE >>> Computer: COMPAQ-2006 >>> Description: >>> IPSec Services: IPSec Services failed to get the complete list of >>> network interfaces on the machine. This can be a potential security >>> hazard to the machine since some of the network interfaces may not >>> get the protection as desired by the applied IPSec filters. Please >>> run IPSec monitor snap-in to further diagnose the problem. >> >> XP Home or XP Pro? Is the machine part of a network or is it a stand >> alone? Do you VPN into a server with this machine? >> >> John > See my later message about IPSec, John. I tried the test > and got no results at all. > > It is XP Home/SP2 (SP3 is the same). It is a one-user-desktop, hardwired > to Ethernet/DSL line. I'm not really sure why you would be getting these failure audits on policy changes on a Windows XP Home machine. I don't think that these settings can be enabled via the registry and the XP Home version has no Local Security Policy tool, and it doesn't have a Group Policy snap-in so I'm not sure how you managed to enable the "Audit policy change" feature on your machine. Unless IPSEC is configured the error is benign, you might have 'phantom' adapters on your machine, verify and make sure that no phantom adapters are present. http://support.microsoft.com/kb/315539 Device Manager does not display devices that are not connected to the Windows XP-based computer If you aren't making VPN connections then there is little to no likelihood that IPSEC is configured or even used on your machine, set the IPSEC service to Manual and see if these errors persist. John |