RE: MS02-29 breaks PPTP connections for non-Admin users?

From: Andrea Efstathiou (aefstathiou@aeropia.com)
Date: 06/18/02 

From: "Andrea Efstathiou" <aefstathiou@aeropia.com>
To: <emann@questinc.org>, <focus-ms@securityfocus.com>
Date: Tue, 18 Jun 2002 11:46:06 +0100

Yes I have the same problem,

I deleted the connection and then recreated it, and it works until the user
logs off. Once the user logs back onto the machine it gives the same error
again.

Regards,

Andrea Efstathiou

"But what ... is it good for?"
--Engineer at the Advanced Computing Systems Division of IBM, 1968,
commenting on the microchip.

-----Original Message-----
From: emann@questinc.org [mailto:emann@questinc.org]
Sent: 17 June 2002 21:18
To: focus-ms@securityfocus.com
Subject: MS02-29 breaks PPTP connections for non-Admin users?

MS02-29 (Q318138) can be installed via Windows Update v4.0 on 2000 systems.
I appear to have tracked down a problem with PPTP RAS connections on Windows
2000 to this patch. After applying the patch and rebooting, any user
without Administrator level access cannot initiate PPTP RAS connections.
Dialup connectors still continue to work, but PPTP connects do not.

The status on the devices shows up as "Device Missing"

If an Administrators logs in, the connection works.

If a non-administrator user is given Administrator group access, the
connection works.

And the kicker, if a non-administrator user uses "logon using dialup
networking" to login to the computer, and utilizes the PPTP connection, the
connection works, and will work for the duration of that login, even through
multiple disconnect/reconnects.

Has anyone else noticed this behavior?

Relevant Pages

  • Re: How Stupid Is Mottershead?
    ... From the USCF Issues Forum this morning. ... The logs were being generated by software that I ... USCF Forums database, I could have tampered with that, too. ... Once the connection is established between an IP ...
    (rec.games.chess.politics)
  • Re: SBS Dial-up Connector - Connects unexpectedly.
    ... If you have turned up the logging on RRAS and made sure it logs everything, ... it should turn up in the systemlog on the server. ... that the connection can't be made. ... > discount spyware on my client PC's. ...
    (microsoft.public.windows.server.sbs)
  • RE: Computers losing their connection
    ... I am getting some event errors in the security logs. ... > Have you looked at the logs on the server? ... they have to restart their computer to regain the connection to some ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to establish the VPN connection. The VPN server may be
    ... Router 192.168.3.1 DHCP server ... >> or security parameters may not be configured properly for this connection. ... What about the ISA logs? ... If you can get a VPN connection but authentication times ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 problems
    ... but under bordermanager (novell proxy) there ... I exported the logs to excel and when connecting to the specific app, ... The entry after that says failed connection attempt. ... with while other SSL sites work, then your ISA is handling SSL properly. ...
    (microsoft.public.isa)