Local network is blocked and time restriction is not working correctly

Halback · ‎03-15-2011

Hi i'm french,

i'm using Norton Online Family and i have 2 pb with it.

1. When the countdown time restriction of 60s appears, if i kill the user (limited) process in taskman the dialogbox disappear and the limited user can use the PC without time limit.

2. When Norton Online Family is installed on the PC i can't access to my local network shares. Even in the admin session.

Thks.

KatieQ · ‎04-09-2009

HI Halback,

1. The program doesn't allow a user with limited rights to kill the process for Norton Online Family in the Task Manager. Please check to see if you have the latest version 2.1.0.51 of Norton Safety Minder (NSM icon in system tray -> About Norton Safety Minder) on the PCs.

If you have the latest version, please give us some details on how the user with limited rights to kill the process, what is the Name of the process?

If you don't have the latest version, please click on the Download Norton Safety Minder link on Online Family main page https://onlinefamily.norton.com/familysafety/loginStart.fs

2. What is the Operating Systems of the PC?

Thanks,

Katie

Halback · ‎03-15-2011

Hi,

i'm using 2.1.0.51 (Framework and datastore 2.1.0.23).

1. The procces is ccSvcHst.exe (limited user) but I made some tests this morning and sorry i didn't notice that the dialogbox appear ten minutes later. I found on this forum that this can be do only 3 times.

2. I'm using XP Pro SP3 with all securities and optionnals updates applies (excepted windows search 4.0) + Microsoft essentials + Comodo firewall.

When i try to acces to another local computer, ccSvcHst.exe try to manage the connection on port 80. If i allow or block this connection nothing change i can't acces to the other computer. If i uninstall Norton, all work fine.

thks.

Matt_Boucher · ‎04-23-2008

So yes you are correct on #1, it will only happen 3 times then it will lock the system, but Katie is still right, how is a Limited user able to kill a process? I think you do not have the user set up properly. In XP under the control panel select "User Accounts". Make sure the user is not a "Computer Administrator", they should be considered a "Limited User". If they are not a limited user, select the user and go to change account type and select "Limited". That should prevent the user from killing a process.

For #2, I have not heard of any problem like this before with Norton Online Family. What exactly are the steps you are trying to do to access a local network? Are you trying to use the browser and browse to a local website? Please give more details and instructions on exactly what you are doing here.

Matt

Halback · ‎03-15-2011

Hi,

1. 4h after i have reach the time limit i'm still in the limited user session.

If i'm not present when the dialogbox appears, i'm LogOff by Norton but the session stay open and i can re-enter in.

If i'm present all i have to do is kill the process again and i can stay using the PC until the dialogbox appear and i kill it...etc.

There is 2 process ccsvcht.exe in memory. One i can't kill (The user is SYSTEM), one i can kill (user with an old name but not the name of the user logon).

Hum, i remember this PC have on history :

The first and only user of the PC was me : "halback" as an admin.

I give it to one of my child and change the name "Halback" for "Rowan" who stay admin for a while.

Recently i create another admin account "RowanAdmin" and change "Rowan" to a limited user.

When "Rowan" logon all the process in memory say the user is halback.

2. Try to search for a computer with is name or is local adress : search ending. nothing to show (except if i search the PC i'm using of course). Try to browse local network (microsoft windows network not web client network) via windows explorer. An error message says i can't reach "jla" (my home group of work) because i have no right or that a device does not work. Sorry i'm french. I don't know all the correct words.

thks

Matt_Boucher · ‎04-23-2008

Ok for #1, I am able to do the steps you indicate even with a limited user, removing the session created by the user is allowed, however we will send a tamper message to the parent when this happens.

When you have Norton Internet Security or Norton 360 installed, you are not able to remove or kill the ccSvcHost from both a limited and admin account, both the user and system process.

It's not 100% possible to protect the system from someone sitting at the keyboard, in fact, anyone can boot from a floppy/cd/usb stick and do anything to the filesystem without us being able to stop them.

For #2, can you give me the exact steps you are doing, including the browser version and location you are trying to hit? Is it a local webserver, a UNC name, a NAS drive?

Matt

Halback · ‎03-15-2011

I have 4 PC with XP Pro in the same Home Group : "JLA", 2 of them are under NoF.

A PC without NoF see the four but it can"t connect to a PC under NoF.

A PC under NoF see nothing expect itself.

If i uninstall NoF the PC see all the other and files sharing are allow.

The steps :

From PC under NoF : In Windows Explorer -> My Network Places -> All the network -> Microsoft Windows Network -> JLA : error box (can't reach JLA. no right, contact administrator. A device of the system does not work)

From PC without NoF In Windows Explorer -> My Network Places -> All the network -> Microsoft Windows Network -> JLA -> PC under NoF : after a long time, error box (can' reach "PCName". no right. contact administrator. Can't find a network way)

++

Halback · ‎03-15-2011

If i don't uninstall NoF but only rename ccsvcht.exe for prevent him to be load at windows startup all my network shares become visibles and reachables in Windows Explorer (version 6.0.2900.5512).

thks

Matt_Boucher · ‎04-23-2008

Our QA Engineering team is currently trying to reproduce this issue and have yet to do so.

Could you try and change your web categories to "allow all" categories and see if that makes a difference.

Also try and log in as an administrator which is not monitored and see if that allows you to see the other machines. If you log in as someone not monitored it should show that when you see the tooltip on the paw in the tray.