http://www.ISAserver.org ------------------------------------------------------- Unrelated but of probably particular interest is that SP1 on W2K3 also changes aspects about DCOM permissions. The property page for My Computer in Component Services shows a different UI for the COM Security tab. Pre-SP1 had that tab named Default COM Security. We had a server that was upgraded to SP1 that needed to be backed out of but we were unable to uninstall it so we worked with PSS to manually remove SP1. After doing that, at least two applications couldn't be installed. One was MSBA 2.0, that kept giving the error that it could only be installed on Windows 2000 SP3 and greater. The other application was ISS RealSecure Server Sensor that gave an Access Denied error. I was only able to get those applications installed after adding the local Administrators group to the Access Permissions list under Default COM Security. On other servers, regardless of SP1 revision level, only Self and System are entered there. On SP1, though, there are two permission settings: Local Access and Remote Access; pre-SP1 only had Access Permission as the single permission that could be granted. It looks like SP1 made some fundamental changes to how these permissions are mapped and when SP1 was ripped out manually the pre-SP1 mapping wasn't restored properly. Cordially yours, Jerry G. Young II MCSE (4.0/W2K) Atlanta EES Implementation Team Lead HHS Engineering Unisys 11493 Sunset Hills Rd. Reston, VA 20190 Office: 703-579-2727 Cell: 703-625-1468 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, March 22, 2006 12:56 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: [ISAserver.org Discussion List] Re: SP2 http://www.ISAserver.org ------------------------------------------------------- W2K3 SP1 & WXP SP2 added this. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Wednesday, March 22, 2006 09:47 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: [ISAserver.org Discussion List] Re: SP2 Is that a Win2003 option? Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Wednesday, March 22, 2006 11:43 AM To: ISA Mailing List Subject: [isalist] Re: [ISAserver.org Discussion List] Re: SP2 Have you selected - show updates? S ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross Sent: Wednesday, March 22, 2006 1:38 PM To: ISA Mailing List Subject: [isalist] Re: [ISAserver.org Discussion List] Re: SP2 i uninstalled my web filter i uninstalled ISA i ran msexec/? and saw I had v 3.0 for windows installer reinstalled ISA reinstalled SP2. its not in my add\remove proggy list. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx