Figure 16 IPSEC Services Properties Dialog Box

Alternatively, you can manually start the IP Security service by entering the following Windows command:

net start policyagent

You can also use the following sequence of commands to manually stop and restart the IP Security service. This also clears any existing IPsec SAs,:

net stop policyagent

net start policyagent

Step 10: Assigning the IP Security Policy

The IP Security subsystem will not use the new policy until you assign (activate) it. Only one IP Security policy can be assigned or active for the system. To assign the new IP Security policy, return to the MMC window. Right click the policy in the MMC window and select Assign, as shown in Figure 17.

30