MS02-29 breaks PPTP connections for non-Admin users?

From: emann@questinc.org
Date: 06/17/02 

From: emann@questinc.org
To: focus-ms@securityfocus.com
Date: Mon, 17 Jun 2002 16:18:25 -0400

MS02-29 (Q318138) can be installed via Windows Update v4.0 on 2000 systems.
I appear to have tracked down a problem with PPTP RAS connections on Windows
2000 to this patch. After applying the patch and rebooting, any user
without Administrator level access cannot initiate PPTP RAS connections.
Dialup connectors still continue to work, but PPTP connects do not.

The status on the devices shows up as "Device Missing"

If an Administrators logs in, the connection works.

If a non-administrator user is given Administrator group access, the
connection works.

And the kicker, if a non-administrator user uses "logon using dialup
networking" to login to the computer, and utilizes the PPTP connection, the
connection works, and will work for the duration of that login, even through
multiple disconnect/reconnects.

Has anyone else noticed this behavior?

Relevant Pages

  • RE: MS02-29 breaks PPTP connections for non-Admin users?
    ... Windows XP, and they did not verify if it effected 2000 Server, but I'm ... I appear to have tracked down a problem with PPTP RAS connections on Windows ... the connection works. ... If a non-administrator user is given Administrator group access, ...
    (Focus-Microsoft)
  • RE: MS02-29 breaks PPTP connections for non-Admin users?
    ... Once the user logs back onto the machine it gives the same error ... I appear to have tracked down a problem with PPTP RAS connections on Windows ... without Administrator level access cannot initiate PPTP RAS connections. ... the connection works. ...
    (Focus-Microsoft)
  • Re: Protecting Home Machines
    ... If they bring them in for a dhcp connection in their offices .. ... thats when I patch, patch, ... patches, etc. ... > internet connections. ...
    (Security-Basics)
  • Re: [RESEND] [PATCH 2/2] ipaq.c timing parameters
    ... | Adds configurable waiting periods to the ipaq connection code. ... | not needed when the pocketpc device is running normally when plugged in, ... The patch also adds a 1 second delay ... | +static int initial_wait; ...
    (Linux-Kernel)
  • PPTP Connection for Power Users
    ... I created a new PPTP connection under Win2K Pro as the Administrator and ... made the connection available to all users. ... However, when logged in as someone who is a member of the Power Users group, ... If I make the user a member of the Administrators group -- no problem. ...
    (microsoft.public.win2000.security)