| Event Id | 32007 |
| Source | ipnathlp |
| Description | The Connection Sharing component could not start because another process has taken control of the kernel-mode translation module. This may occur when Internet Connection Sharing has been enabled for a connection. If this is the case, please disable Internet Connection Sharing for the connection in the Network Connections folder and then restart Routing and Remote Access. |
| Event Information | The following information from a newsgroup post may help you: Do not enable connection sharing on the ISA server. Disable it and restart the server. That should clear it up. Also, on the ISA server, uninstall IIS. 1 - dont install RRAS in NAT router mode with ISA. That, and installing ICS with ISA is what gets you the ipnathlp messages. 2 - dont use the "Configure your server" route to install RRAS on an ISA server. ISA has to manage RRAS installation and basic setup through its own wizards. 3 - spoof attacks are usually a result of an ISA misconfiguration (external IP in the LAT, more than one external NIC, etc.) |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.