MS02-29 breaks PPTP connections for non-Admin users?

From: emann@questinc.org
Date: 06/17/02 

From: emann@questinc.org
To: focus-ms@securityfocus.com
Date: Mon, 17 Jun 2002 16:18:25 -0400

MS02-29 (Q318138) can be installed via Windows Update v4.0 on 2000 systems.
I appear to have tracked down a problem with PPTP RAS connections on Windows
2000 to this patch. After applying the patch and rebooting, any user
without Administrator level access cannot initiate PPTP RAS connections.
Dialup connectors still continue to work, but PPTP connects do not.

The status on the devices shows up as "Device Missing"

If an Administrators logs in, the connection works.

If a non-administrator user is given Administrator group access, the
connection works.

And the kicker, if a non-administrator user uses "logon using dialup
networking" to login to the computer, and utilizes the PPTP connection, the
connection works, and will work for the duration of that login, even through
multiple disconnect/reconnects.

Has anyone else noticed this behavior?

Relevant Pages

  • RE: MS02-29 breaks PPTP connections for non-Admin users?
    ... Windows XP, and they did not verify if it effected 2000 Server, but I'm ... I appear to have tracked down a problem with PPTP RAS connections on Windows ... the connection works. ... If a non-administrator user is given Administrator group access, ...
    (Focus-Microsoft)
  • RE: MS02-29 breaks PPTP connections for non-Admin users?
    ... Once the user logs back onto the machine it gives the same error ... I appear to have tracked down a problem with PPTP RAS connections on Windows ... without Administrator level access cannot initiate PPTP RAS connections. ... the connection works. ...
    (Focus-Microsoft)
  • Re: Protecting Home Machines
    ... If they bring them in for a dhcp connection in their offices .. ... thats when I patch, patch, ... patches, etc. ... > internet connections. ...
    (Security-Basics)
  • [ANN] httpclient/2.1.6
    ... This release includes IMPORTANT update for HTTPSconnection. ... Trusted CA bundle file cacert_sha1.p7s for older environment (where ... httpclient - HTTP accessing library. ... same server in parallel, one of these connections will be leaked, patch ...
    (comp.lang.ruby)
  • Re: [RESEND] [PATCH 2/2] ipaq.c timing parameters
    ... | Adds configurable waiting periods to the ipaq connection code. ... | not needed when the pocketpc device is running normally when plugged in, ... The patch also adds a 1 second delay ... | +static int initial_wait; ...
    (Linux-Kernel)