How do you completely remove the Internet Connection Sharing service in
Windows 2000? I am aware how one enables or disables that feature for each
adapter, but I want to completely eliminate the service from a firewalled
computer to prevent any possibility of it being used.

--
Will

Re: Removing Internet Connection Sharing Service by Pegasus

Pegasus
Mon Apr 28 01:46:47 PDT 2008


"Will" <westes-usc@noemail.nospam> wrote in message
news:s7-dnSLyy_HA74jVnZ2dnUVZ_rKtnZ2d@giganews.com...
> How do you completely remove the Internet Connection Sharing service in
> Windows 2000? I am aware how one enables or disables that feature for
> each adapter, but I want to completely eliminate the service from a
> firewalled computer to prevent any possibility of it being used.
>
> --
> Will

Run services.msc, then disable the "Internet Connection Sharing"
service. If this is not enough for you, rename the registry key
HKLM\CurrentControlSet\Services\SharedAccess to
HKLM\CurrentControlSet\Services\SharedAccessNotWanted.



Re: Removing Internet Connection Sharing Service by Will

Will
Mon Apr 28 16:19:47 PDT 2008

"Pegasus (MVP)" <I.can@fly.com.oz> wrote in message
news:OpbslxQqIHA.3900@TK2MSFTNGP05.phx.gbl...
>
> "Will" <westes-usc@noemail.nospam> wrote in message
> news:s7-dnSLyy_HA74jVnZ2dnUVZ_rKtnZ2d@giganews.com...
>> How do you completely remove the Internet Connection Sharing service in
>> Windows 2000? I am aware how one enables or disables that feature for
>> each adapter, but I want to completely eliminate the service from a
>> firewalled computer to prevent any possibility of it being used.
>>
>> --
>> Will
>
> Run services.msc, then disable the "Internet Connection Sharing"
> service. If this is not enough for you, rename the registry key
> HKLM\CurrentControlSet\Services\SharedAccess to
> HKLM\CurrentControlSet\Services\SharedAccessNotWanted.

The problem we are having is that we set the service to Disabled and someone
or something keeps resetting it to Automatic.

To be clear on the registry renaming solution above, the "NotWanted" is a
string you just made up, and we could replace it by any string? In other
words, the intent was to just have the correct path be unreachable?

What part of the registry will list all of the available services,
referencing the service at its original path?

--
Will




Re: Removing Internet Connection Sharing Service by Pegasus

Pegasus
Tue Apr 29 00:01:52 PDT 2008


"Will" <westes-usc@noemail.nospam> wrote in message
news:a_SdnQ21y9wOxovVnZ2dnUVZ_jOdnZ2d@giganews.com...
> "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message
> news:OpbslxQqIHA.3900@TK2MSFTNGP05.phx.gbl...
>>
>> "Will" <westes-usc@noemail.nospam> wrote in message
>> news:s7-dnSLyy_HA74jVnZ2dnUVZ_rKtnZ2d@giganews.com...
>>> How do you completely remove the Internet Connection Sharing service in
>>> Windows 2000? I am aware how one enables or disables that feature for
>>> each adapter, but I want to completely eliminate the service from a
>>> firewalled computer to prevent any possibility of it being used.
>>>
>>> --
>>> Will
>>
>> Run services.msc, then disable the "Internet Connection Sharing"
>> service. If this is not enough for you, rename the registry key
>> HKLM\CurrentControlSet\Services\SharedAccess to
>> HKLM\CurrentControlSet\Services\SharedAccessNotWanted.
>
> The problem we are having is that we set the service to Disabled and
> someone or something keeps resetting it to Automatic.
>
> To be clear on the registry renaming solution above, the "NotWanted" is a
> string you just made up, and we could replace it by any string? In other
> words, the intent was to just have the correct path be unreachable?
>
> What part of the registry will list all of the available services,
> referencing the service at its original path?
>
> --
> Will

Now that you mention it I realise that my suggestion was
silly. Renaming the key would result in you getting the same
service under a different name, which may or may not disable
ICS, depending on how the facility is referenced by other
Windows components. Here are a couple of methods that
WILL work:
a) The clean way: Run msconfig.exe
(http://www.svrops.com/svrops/dwnldoth.htm)
to disable the SharedAccess service.
b) The dirty way: Change the ImagePath value of this service from
%SystemRoot%\System32\svchost.exe -k netsvcs to
%SystemRoot%\System32\svchost.ex -k netsvcs
This method might generate an error report in your event viewer.

Remember to document what you did so that you can undo it one
year from now when you may have forgotten the details.