Data Center Security

 we have Data Center Security 6.0 and using Windows core policy and applied to the clients..and the client are not getting IP from DHCP server...if i disable CSP prevention..it works fone...Please help

Hello Mr.Yaduvanshi,

I see that it is a known issue where 'Out of the box' strict/core prevention policy(s) blocks DHCP client service to start. I hope this should be fixed in 6.0 MP1.

It seems that svchost.exe ( netsvcs_ps) tries to access DHCPCSVC.DLL  but it fails.  Please try following workaround & check if it works:

- Sandboxes

  - Core OS Service Options

    - Default Windows Services [def_winsvcs_ps,netsvcs_ps]

       - Registry Rules

         - Writeable resource List

             - Allow but log modifications to these Registry keys

Resource Path:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services

Program Path: %systemroot%\system32\svchost.exe

Also add DHCPCSVC.DLL to writable resource list.

Regards,

Sankara Subramanian

Hi sankara 

Thank you 

Hi Sankara,

Thanks for the response.  I am impacted by this too.  Regarding the part of the answer where you say "Also add DHCPCSVC.DLL to writable resource list", where do you do this?  Would this be under Files or Processes?  

Thanks in advance,

Bob

Hi Bob,

Try the below steps

 Sandboxes

  - Core OS Service Options

    - Default Windows Services [def_winsvcs_ps,netsvcs_ps]

       - Registry Rules

         - Writeable resource List

             - Allow but log modifications to these Registry keys

Resource Path:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services

Program Path: %systemroot%\system32\DHCPCSVC.DLL

Regards,

Sankara

Hi Sankara,

I am sorry but I am still confused.  Do I need to add dhcpcsvc.dll to the writeable resource list?  If yes, then would I not add this under Processes instead of Registry?

Bob

I think you are not navigating to that location what i mentioned...If you navigate to this below location

- Sandboxes

  - Core OS Service Options

    - Default Windows Services [def_winsvcs_ps,netsvcs_ps]

       - Registry Rules

         - Writeable resource List

             - Allow but log modifications to these Registry keys

Then click on Add button, you will get an option to enter  Resource Path , Program path

Resource Path:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services

Program Path: %systemroot%\system32\DHCPCSVC.DLL

Regards,

Sankara

Hi Sankara,

Now I understand.  Thanks.

Bob