I so wanted this to work, but at least on the XP machine I'm testing
with, the Start value is 00000002 whether ICS is on or off. I don't see
any changes in the SharedAccess key whether I enable ICS or not on this
machine.

I'm thinking about exporting the registry and running diff...
--Cal

Chidaushe, Mavhu wrote:
> We have been implementing the ICS disable check since spring semester
> and it has help decrease the number of rogue shared wireless connections
> and other problems associated with ICS. In our environment it was a two
> pronged approach because we had student machines (not in Active
> Directory) and faculty/staff machines (in Active Directory). Our
> faculty/staff machines had a GPO being applied that disabled ICS. So in
> order to make things work for both students and faculty/staff users, I
> used the following:
> 
>  
> 
> -          2 checks. One for students and one for faculty/staff AD machines.
> 
> -          1 Rule
> 
> -          1 remedial *.reg file to bring you into compliance (this file
> is bundled into a self extracting *.exe that will autorun and user is
> given default .reg file warning when installing.
> 
> -          2 requirements. One for each group. (I don’t recall why I did
> this, I’d have to dig up my notes for details explaining this section)
> 
>  
> 
> See details below:
> 
>  
> 
> Remedial Section:
> 
> /_Disable.reg_/_ <*/file contents:below/*>_
> 
> ***************************************************
> 
> Windows Registry Editor Version 5.00
> 
>  
> 
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
> 
> "Start"=dword:00000003
> 
> ******************************************************


-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

   www.calfrye.com,  www.pitalabs.com


"Accomplishments have no color. --Leontyne Price.

Reply via email to