Netsh and IPSec Policies

From: Nick (someone_at_nospam.net)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 16:13:46 +0100

I hope someone can help me with this, I am trying to use 'netsh' on Windows
2003 to script the creation of IPSec Policies and IPSec Filters. I have got
this to work well for the Local Computer, but when I try and get it to
create the Policy as part of the Domain Security Policy it does not work....
I have used the command:

netsh ipsec static set store location=domain domain='FQDN of Domain'

This command is accepted OK, but then when the follow command runs it fails:

netsh ipsec static set policy name="Test Policy" activatedefaultrule=no
gponame="Default Domain Policy" assign=yes

It says that 'gponame' is not valid is this context. The thing is, it works
if I enter it all manually from the netsh interface, but not from a Command
file. I have checked TechNet and it says it should work OK in both
instances.

Any help appreciated.

Thanks in advance.

Nick

Relevant Pages

  • Re: Scripted IPSec policies on Windows XP (without AD/GPOs)
    ... ipsec policy configuration tool that will run on both XP and Win2k3. ... technet piece by Steve Riley provides a more detailed overview of the IPSec ... Scripted IPSec policies on Windows XP ... it seems netsh ipsec commands are only supported ...
    (Focus-Microsoft)
  • RE: Scripted IPSec policies on Windows XP (without AD/GPOs)
    ... it seems netsh ipsec commands are only supported ... possible - at least it hasn't been on the Windows XP boxes I've checked. ... I'm looking at the 'DCOM IPSec Mitigation Tools' that K Levinson ... with the IP Security Policy snap-in. ...
    (Focus-Microsoft)
  • Re: Netsh and IPSec Policies
    ... the shell, ... > for the second command the shell is going to assume you're trying to edit ... What you need to do is create a file with ipsec ... then call it from a single netsh command. ...
    (microsoft.public.windows.server.security)
  • Re: Netsh and IPSec Policies
    ... the second command the shell is going to assume you're trying to edit the ... What you need to do is create a file with ipsec commands, ... then call it from a single netsh command. ... I have got>this to work well for the Local Computer, but when I try and get it to>create the Policy as part of the Domain Security Policy it does not>work.... ...
    (microsoft.public.windows.server.security)
  • Re: Sysopt
    ... > Note The sysopt ipsec pl-compatible command is deprecated. ... > dynamic-map match-address statement. ...
    (comp.dcom.sys.cisco)