Re: SBS2003 Firewall Group Policy

I agree that one of the biggest frustrations in computing is to get 3rd
party vendors to comply with security best practices. Because Microsoft
takes heat from every direction on this topic, I believe you're going to see
future security features enabled rather than disabled by default, as is the
case with the firewall GPO. You do have the option to disable it if that's
your preference.

I've got to say, I find it amazing that some vendors have found it difficult
to integrate their products with the firewall given that it's been out for
almost a year, with a very lengthy public beta before that.


"Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5C9E67CA-58CA-4714-9BBD-5A207849AC49@xxxxxxxxxxxxxxxx
> Thanks for the reply; I'll test it ASAP.
>
> In regard to the following:
>
>> In an SBS network, the Windows firewall is not protecting you from
>> outside
>> threats so much as it is protecting your users from each other. Someone
>> with a diskette or a careless download can trash your network from within
>> regardless of your external firewalls.
>
> Just as I do not need the government to protect me from myself, I do not
> need Microsoft to protect users from themselves. Most of my clients are
> small business who have industry specific software; Oriental Rug Cleaning,
> Court Reporting, Case Mangement, Real Estate, etc.; Microsoft SP2 does not
> understand that network traffic from these programs is legitimate. I
> should
> not have to create rules to allow legitimate network traffic. I
> understand
> that in the enterprise where you have a standard application set,
> extensive
> GPOs, RIS, etc, the advantages of the firewall are apparent. I wish
> Microsoft would understand the former concept and give us the choice of
> implementing the firewall (and other features) or not, rather that
> dictating
> it.
>
>
> "Dave Nickason [SBS MVP]" wrote:
>
>> Answer: on the SBS, open Group Policy Management. You'll see a policy
>> called Small Business Server Windows Firewall. You can edit the policy
>> by
>> finding it under computer configuration, administrative templates,
>> networking. You'd change the "protect all network connections" policy to
>> disabled to prevent the firewall from running anywhere in the network.
>>
>> Editorial comment: IMO it would be a much better idea to figure out how
>> to
>> make the firewall work with the Ricoh. SP2 is widely distributed by now,
>> and I'd guess Ricoh support has simple instructions for solving your
>> problem.
>>
>
>>
>>
>> "Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:B09F5D39-41EA-4E03-9881-F49125B7E8A9@xxxxxxxxxxxxxxxx
>> >I have a small client who ought to be on a peer to peer network;
>> >however,
>> > they purchased a software package that required a server; the one they
>> > bought
>> > came with SBS2003. All service packs, patches, etc. are up to date.
>> >
>> > Each workstation is XP Pro with SP2. They have a giant Ricoh copier,
>> > printer scanner that does not work with windows firewall. I do not
>> > consider
>> > this a problem, I have installed two (2) firewalls by different
>> > manufacturers
>> > for firewall protection. I want to disable the windows firewall;
>> > however,
>> > when I go to do so, There is an error message about Group Policy having
>> > disabled the abilty to turn off the firewall.
>> >
>> > I read article 872769, but it doesn't really tell me what I want to
>> > know:
>> > I
>> > want to disable or destroy all windows firewalls on the network. I
>> > have
>> > adequate hardware protection and their network scanner will not work
>> > with
>> > it.
>> > Therefore I want it gone.
>> >
>> > Can someone help me here?
>> >
>> > Thanks,
>> > Chris Chamberlin
>>
>>
>>


.

Relevant Pages

  • Re: New Folder on Desktop
    ... Microsoft has these suggestions for Protecting your computer from the ... I'll mainly work around Windows XP, as that is what the bulk of this ... Why you should use a computer firewall.. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: mulltiple ebay messages
    ... Microsoft has these suggestions for Protecting your computer from the ... I'll mainly work around Windows XP, as that is what the bulk of this ... Why you should use a computer firewall.. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Get rid of Freeware?
    ... I have Norton anti-virus and Microsoft ... Microsoft has these suggestions for Protecting your computer from the ... I'll mainly work around Windows XP, as that is what the bulk of this ... Why you should use a computer firewall.. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: can ping but not browse
    ... I have stopped the firewall. ... # are safed from all (security) hazards. ... firewall/bastion host to the internet ... # internet and to an internal network, ...
    (Fedora)
  • Re: Why not use NETBEUI on Windows XP ??
    ... Trusted zones means that firewall rules will be bypassed for any or certain ... not count on netbeui being a defense for such as long as smb connectivity ... while the connection is open. ... > Microsoft Networking components on my network. ...
    (microsoft.public.windowsxp.network_web)
Loading