Automated Deployment Services may use undocumented ports on a Windows Server 2003-based computer (917449)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry


Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.

SYMPTOMS

On a Microsoft Windows Server 2003-based computer, Automated Deployment Services (ADS) may use undocumented ports. This behavior could lead to various issues. For example, the ADS server may try to use ports that are restricted by a firewall or by a router.

RESOLUTION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, configure a port range that the ADS server can use to deploy images. This resolution uses an undocumented feature that lets ADS administrators set the ports that the ADS server can use to deploy images. To enable this feature, follow these steps:
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then right-click the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ADSImgSvc\Parameters

  3. On the Edit menu, point to New, and then click DWORD Value.
  4. Type PortsStart to name the value, and then press ENTER.
  5. On the Edit menu, point to New, and then click DWORD Value.
  6. Type PortsEnd to name the value, and then press ENTER.
  7. Double-click PortsStart, type the port number that you want to use for the start of the port range in the Value data box, and then click OK.
  8. Double-click PortsEnd, type the port number that you want to use for the end of the port range in the Value data box, and then click OK.

    Note You have to use at least two ports in this range.
  9. Restart the Image Distribution service.

WORKAROUND

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

To work around this issue, open all ports on the firewall or on the router. See the product documentation for information about how to configure ports on a firewall or on a router.
Modification Type:MajorLast Reviewed:5/17/2006
Keywords:kbExpertiseAdvanced kbtshoot kbbug KB917449 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.