Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

You are not prompted to restart Windows when you reinstall ISA Server 2004


View products that this article applies to.

Symptoms

When you install Microsoft Internet Security and Acceleration (ISA) Server 2004 on a Microsoft Windows 2000-based computer or on a Microsoft Windows Server 2003-based computer, you receive the following message:
You must restart your system for the configuration changes made to Microsoft ISA Server to take effect. Click Yes to restart now or No if you plan to restart later.
However, if you subsequently remove and then reinstall ISA Server 2004, you are not prompted to restart your computer.

↑ Back to the top


Cause

This behavior occurs because of the configuration changes that the ISA Server 2004 Setup program makes to Windows. The ISA Server Setup program modifies the following registry subkey to set the value of the SynAttackProtect registry entry to 2:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters
To take effect, this registry change requires that you restart the computer. However, if you subsequently remove ISA Server 2004, the Setup program does not remove this registry entry. Therefore, when you later reinstall ISA Server 2004, you are not prompted to restart the computer.

↑ Back to the top


More information

If you install ISA Server on a Windows 2000-based computer where the value of the SynAttackProtect registry entry is already set to 2, you may still be prompted to restart your computer when the Setup program completes the installation. This behavior occurs because the Microsoft SQL Server 2000 Desktop Engine installation updates Microsoft Data Access Components (MDAC) from version 2.5 to version 2.7. This MDAC update operation requires that you restart Windows. However, MDAC is only updated when you first install ISA Server 2004. If you remove and then reinstall ISA Server 2004, you do not have to restart Windows, because the correct version of MDAC is already installed.

↑ Back to the top


For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
324270 How to harden the TCP/IP stack against Denial of Service attacks in Windows Server 2003

↑ Back to the top


Keywords: KB838133, kbprb, kbenv, kbfirewall, kbdeployment

↑ Back to the top

Article Info
Article ID : 838133
Revision : 4
Created on : 9/1/2004
Published on : 9/1/2004
Exists online : False
Views : 305