Microsoft KB Archive/924310

= The Windows Firewall setting may change to &quot;On (recommended)&quot; when you perform an Automated System Recovery restoration of the operating system on a computer that is running Windows Server 2003 SP1 or that is running Windows Server 2003 R2 =

Article ID: 924310

Article Last Modified on 9/29/2006

-

APPLIES TO

 Microsoft Windows Server 2003 Service Pack 1, when used with:  Microsoft Windows Server 2003, Standard Edition (32-bit x86)

 Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)

 Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)  Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)</li> Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)</li> Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)</li></ul>

-

<div class="symptoms_section">

SYMPTOMS
Consider the following scenario. You disable the Windows Firewall on a Microsoft computer that is running Microsoft Windows Server 2003 Service Pack 1 (SP1) or on a computer that is running Windows Server 2003 R2. Then, you use the NTBackup.exe tool to perform an Automated System Recovery (ASR) restoration of the operating system. In this scenario, the Windows Firewall settings may not be restored. For example, the Windows Firewall setting in Control Panel may change to On (recommended). Additionally, the Startup type setting for the Windows Firewall/Internet Connection Sharing (ICS) service in Computer Management may change to Automatic.

<div class="cause_section">

CAUSE
This problem occurs because ASR sets Windows Firewall settings to On (recommended) when it restores the operating system.

<div class="workaround_section">

WORKAROUND
To work around this problem, use one of the following methods:
 * Before you use the NTBackup.exe tool to perform an ASR restoration of the operating system, change the Startup type setting for the Windows Firewall/Internet Connection Sharing (ICS) service in Computer Management to Automatic.
 * After you use the NTBackup.exe tool to perform an ASR restoration of the operating system, change the Windows Firewall setting in Control Panel to Off (not recommended).

<div class="moreinformation_section">

MORE INFORMATION
When you install Windows Server 2003, the Windows Firewall setting in Control Panel is set to On (recommended). This is to help protect networks when security updates are downloaded after the Setup program is completed.

Additionally, when the Ntbackup.exe tool restores each service, it restores the service's settings or modifies the service's settings. The Ntbackup.exe tool does this based on the priority of the service's Startup Type setting. If a service's Startup Type setting is Automatic, it has a high priority. If a service's Startup Type setting is Manual, it has a medium priority. If a service's Startup Type setting is Disabled, it has a low priority. If the Startup Type setting for the Windows Firewall/Internet Connection Sharing (ICS) service is set to Disabled, it has a low priority and its settings are not restored. After the restoration process, its setting is set to Automatic.

Additional query words: kbbackup kbprb kbtshoot kbexpertiseadvanced KB924310

Keywords: kbbackup kbprb kbtshoot kbexpertiseadvanced KB924310

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.