Local network is blocked and time restriction is not working correctly

Hi i'm french,

 

i'm using Norton Online Family and i have 2 pb with it.

 

1. When the countdown time restriction of 60s appears, if i kill the user (limited) process in taskman the dialogbox disappear and the limited user can use the PC without time limit.

 

2. When Norton Online Family is installed on the PC i can't access to my local network shares. Even in the admin session.

 

Thks.

Hi,

 

i'm using 2.1.0.51 (Framework and datastore 2.1.0.23).

 

1. The procces is ccSvcHst.exe (limited user) but I made some tests this morning and sorry i didn't notice that the dialogbox appear ten minutes later. I found on this forum that this can be do only 3 times.

 

2. I'm using XP Pro SP3 with all securities and optionnals updates applies (excepted windows search 4.0) + Microsoft essentials + Comodo firewall.

When i try to acces to another local computer, ccSvcHst.exe try to manage the connection on port 80. If i allow or block this connection nothing change i can't acces to the other computer. If i uninstall Norton, all work fine.

 

thks.

So yes you are correct on #1, it will only happen 3 times then it will lock the system, but Katie is still right, how is a Limited user able to kill a process? I think you do not have the user set up properly. In XP under the control panel select "User Accounts". Make sure the user is not a "Computer Administrator", they should be considered a "Limited User". If they are not a limited user, select the user and go to change account type and select "Limited". That should prevent the user from killing a process.

 

For #2, I have not heard of any problem like this before with Norton Online Family. What exactly are the steps you are trying to do to access a local network? Are you trying to use the browser and browse to a local website? Please give more details and instructions on exactly what you are doing here.

 

Matt

Hi,

 

1. 4h after i have reach the time limit i'm still in the limited user session.

If i'm not present when the dialogbox appears, i'm LogOff by Norton but the session stay open and i can re-enter in.

If i'm present all i have to do is kill the process again and i can stay using the PC until the dialogbox appear and i kill it...etc.

There is 2 process ccsvcht.exe in memory. One i can't kill (The user is SYSTEM), one i can kill (user with an old name but not the name of the user logon).

 

Hum, i remember this PC have on history :

 

The first and only user of the PC was me : "halback" as an admin.

I give it to one of my child and change the name "Halback" for "Rowan" who stay admin for a while.

Recently i create another admin account "RowanAdmin" and change "Rowan" to a limited user.

When "Rowan" logon all the process in memory say the user is halback.

 

2. Try to search for a computer with is name or is local adress : search ending. nothing to show (except if i search the PC i'm using of course). Try to browse local network (microsoft windows network not web client network) via windows explorer. An error message says i can't reach "jla" (my home group of work) because i have no right or that a device does not work. Sorry i'm french. I don't know all the correct words.

 

thks

Ok for #1, I am able to do the steps you indicate even with a limited user, removing the session created by the user is allowed, however we will send a tamper message to the parent when this happens.

 

When you have Norton Internet Security or Norton 360 installed, you are not able to remove or kill the ccSvcHost from both a limited and admin account, both the user and system process.

 

It's not 100% possible to protect the system from someone sitting at the keyboard, in fact, anyone can boot from a floppy/cd/usb stick and do anything to the filesystem without us being able to stop them.

 

For #2, can you give me the exact steps you are doing, including the browser version and location you are trying to hit? Is it a local webserver, a UNC name, a NAS drive?

 

Matt

I have 4 PC with XP Pro in the same Home Group : "JLA", 2 of them are under NoF.

A PC without NoF see the four but it can"t connect to a PC under NoF.

A PC under NoF see nothing expect itself.

If i uninstall NoF the PC see all the other and files sharing are allow.

 

The steps :

 

From PC under NoF : In Windows Explorer -> My Network Places ->  All the network ->  Microsoft Windows Network -> JLA : error box (can't reach JLA. no right, contact administrator. A device of the system does not work)

 

From PC without NoF In Windows Explorer -> My Network Places -> All the network -> Microsoft Windows Network -> JLA -> PC under NoF : after a long time, error box (can' reach "PCName". no right. contact administrator. Can't find a network way)

 

++

If i don't uninstall NoF but only rename ccsvcht.exe for prevent him to be load at windows startup all my network shares become visibles and reachables in Windows Explorer (version 6.0.2900.5512).

 

thks

 

Our QA Engineering team is currently trying to reproduce this issue and have yet to do so.

 

Could you try and change your web categories to "allow all" categories and see if that makes a difference.

 

Also try and log in as an administrator which is not monitored and see if that allows you to see the other machines. If you log in as someone not monitored it should show that when you see the tooltip on the paw in the tray.

hi,

 

In fact i have made all my network tests from my admin account who is not monitoring by NoL.

Adding the local adress in the list of the websites allowed or allow all websites in the rule of the limited user don't change anything

 

thks

Ok that narrows it quite a bit.

 

What AV product do you have running on those systems?

 

Also what other networking type of product do you run on those systems?

No more time know.

i'll be back tomorrow.

 

Firewall : Comodo (NoL is set to trust) with no Hips.

AV : Microsoft Essential

Nothing more of one of the 2 PC who had a fresh install of Windows.

I have uninstall comodo and unable/disable the windows firewall, nothing change.

Don't have test to uninstall the AV because the other PC use the AV of Comodo not microsoft essentail but i'll test tommoroww.

 

thks

Hi i'm french,

 

i'm using Norton Online Family and i have 2 pb with it.

 

1. When the countdown time restriction of 60s appears, if i kill the user (limited) process in taskman the dialogbox disappear and the limited user can use the PC without time limit.

 

2. When Norton Online Family is installed on the PC i can't access to my local network shares. Even in the admin session.

 

Thks.

Hi,

 

the pb come from another soft of parental control (Crawler Parental control who is no longuer support) i had install to solve my pb #1.

I set it to manage only the time on the PC nothing more but, sorry, i don't have think of it because normaly he doesn't load in my admin account (it must be hidden somewhere).

 

In fact i can't use the two at the same time. With only one of them i can see my local netwotk but not with the both.

There is some conflict between the two.  :-(

 

++

Ah yes, multiple parental control products trying to run on the same system will not work properly. They are probably both trying to access the network at the driver level and have conflicts.

 

I would say we can mark this as resolved since we now know what was causing the issue, thanks for following up.

 

Matt

it would be interesting to see if you can see your network shares when the firewall program you are using is disabled, this might be a potential application conflict.

Confirmed, with the installation of crawler parental control, network shares aren't available.