Win xp sp2

yogutt · Post by **yogutt** » 2004-08-26 14:18

I am having a problem logging back into a computer that was upgraded to sp2
any odeas would be great
yosef guttman

mikej · Post by **mikej** » 2004-08-26 15:01

Not sure if it helps but here is what I have found. Prior to loading SP2, I could Ultra VNC into any pc using the IP address or the name of the pc with no problem. Now after loading SP2 and adding winvnc.exe to the list of allowed applications in the XP SP2 firewall exceptions, I could not Ultra VNC into the box with the computer name, I could though using the IP address. This is the wierd part though, If I turned off the firewall on my pc (test pc of coarse

) then I turned it back on, then I could use my pc name again to get in. Another wierd thing is that if I logged out, then back in, my problem reoccured.

mikej · Post by **mikej** » 2004-08-26 15:08

Slight correction to what I posted before. I had to turn off XP SP2 Firewall first, then VNC into it with the computer name, then turn Firewall back on then it would work til I logged off, and back on, then The problem would reoccur. This sucks bad.

lenisham · Post by **lenisham** » 2004-08-26 21:03

One of the least complicated options is to use netsh on the computer with SP2. I have not tested these yet as I have not added SP2 to any machines yet.

-Run netsh
- to allow all to 5900
add portopening TCP 5900 enable all
- to allow the local subnet to 5900
add portopening TCP 5900 enable LocalSubnet
- to allow specify the ip addresses to 5900 (line wraps)
add portopening TCP 5900 enable 157.60.0.1,172.16.0.0/16,10.0.0.0/255.0.0.0,LocalSubnet

tcblack · Post by **tcblack** » 2004-09-01 14:08

I had the same problem, just open port 5900 on the firewall.

mikej · Post by **mikej** » 2004-09-02 14:57

I added tcp port 5800 and tcp port 5900 to the exceptions list and I still cant get in. If I use the IP address of the pc though, I CAN get in. It seems like a netbios thing or somthing similiar.

lenisham · Post by **lenisham** » 2004-09-02 19:31

mikej wrote:I added tcp port 5800 and tcp port 5900 to the exceptions list and I still cant get in. If I use the IP address of the pc though, I CAN get in. It seems like a netbios thing or somthing similiar.

I wonder if you need to open up 445 when using the name vs the IP address? I connect from all over the place and use IP addresses without problems.

mikej · Post by **mikej** » 2004-09-03 12:28

Lenisham
That actually worked. What I did was try to add port 445 to the exceptions list and it told me that I couldn't add this port because it was part of the "File and Printer Sharing" item, so I just checked "File and Printer Sharing" and it works with the name of the pc and the IP Address. I had to also add ports 5900 and 5800.

Thanks for the suggestion :-o

lenisham · Post by **lenisham** » 2004-09-03 13:42

mikej wrote:Lenisham
That actually worked. What I did was try to add port 445 to the exceptions list and it told me that I couldn't add this port because it was part of the "File and Printer Sharing" item, so I just checked "File and Printer Sharing" and it works with the name of the pc and the IP Address. I had to also add ports 5900 and 5800.

Thanks for the suggestion :-o

You may have opened more than you need. Aside from actual tersting a packet capture would reveal what ports are used.

Since I deal with security I try to keep security in mind while lettinmg business get done.

mikej · Post by **mikej** » 2004-09-03 13:48

I looked at that to, so I saw that by enabling "File and Printer Sharing", it opened ports 139,445,137,138 so if you double click the "File and Printer Sharing" option in the exceptions list, it will allow you to check or uncheck which ports you want to open, so I only allowed the 445 port and that works.

UltraVNC

Win xp sp2

Win xp sp2

Win XP SP2 Login Issue

Win XP SP2 Login Issue

Modify SP2 Firewall

open port 5900

Additional port

port vs. File & Print Sharing