Consider the following scenario. A Microsoft Windows XP-based client computer is joined to a Microsoft Windows Server 2003 domain. Additionally, Windows Server 2003 Service Pack 1 (SP1) is installed on the authenticating domain controller. In this scenario, you experience the following symptoms:
You cannot connect to the Internet.
You cannot join or log on to the domain. Therefore, the domain controller is in IPsec Block mode.
When you start the IPSEC Services component on the domain controller, you may receive an error message that is similar to the following:
The system cannot find the file specified.
Additionally, the following events may be logged in the server's System log:
Event Type: Error Event Source: IPSEC Event Category: None Event ID: 4292 Date: Dateime Time: Time08 User: N/A Computer: COMPUTER_NAME Description: The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions.
Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: Date Time: Time User: N/A Computer: COMPUTER_NAME Description: The IPSEC Services service terminated with the following error: The system cannot find the file specified
This problem can occur if the IPSec\Policy\Local registry key is deleted or when there is a corrupted file in the policy store. The file may become corrupted if an interruption occurs when the policy is being written to the disk.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
To resolve this issue, follow these steps:
Delete the local policy registry subkey. To do this, follow these steps:
Click Start, click Run, type regedit in the Open box, and then click OK.
In Registry Editor, locate and then click the following subkey: