Re: Can SP2 Firewall be configured with Login Script in AD?
From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 09/23/04
- Next message: Marshall: "Roaming profiles .pst local settings folder not backing up."
- Previous message: Scott: "WIN 2003 Web Edition"
- In reply to: jm: "Re: Can SP2 Firewall be configured with Login Script in AD?"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 24 Sep 2004 00:22:43 +0100
The machines will refresh their policies within hours. The gpupdate utility
ships with XP and 2003, but is used to force refresh of that machine's
policy, not in the way you're describing.
The command to refresh machine settings on a Windows 2000 machine is as
follows (not that it will help you at all)
secedit /refreshpolicy machine_policy
To test the policy, use the following command once for each state (network
lead plugged in and unplugged):
netsh firewall show state
Hope this helps
Oli
"jm" <john_20_28_2000@yahoo.com> wrote in message
news:c67e4bdd.0409200504.20d4e833@posting.google.com...
>I used my XP SP2 machine created a new GPO in AD Users and Computers
> for my OU with all the XP machines in it. The new GPO policy, under
> Computer Configuration/Adminstrative Templates/Network/Network
> Connections/Windows Firewall/Domain Profile (and Standard Profile) was
> set for what I needed.
>
> Now that I have created the GPO on XP SP2 for the OU in the domain,
> how can I force that. On my Windows 2000 Domain Controller I did a
> search and can't find gpupdate.exe anywhere. I thought that I could
> do a gpupdate /force from the DC and it would simply update all the
> policies everywhere and catch my GPO for my XP machines in the
> process.
>
> Please comment. Thank you.
>
> "Oli Restorick [MVP]" <oli@mvps.org> wrote in message
> news:<Odn8EHjnEHA.1296@TK2MSFTNGP09.phx.gbl>...
>> You could apply this using a computer startup script in AD without making
>> users admins. However, if you have AD, administering group policy from
>> an
>> XP SP2 machine is the easiest way to configure the new Windows Firewall
>> GPO
>> settings.
>>
>> Oli
>>
>>
>> "Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
>> news:Xns9569B1729F89Ecasey01@207.46.248.16...
>> > john_20_28_2000@yahoo.com (jm) said
>> >
>> >> I have started rolling out SP2. Just wondering if there is anyway to
>> >> turn ICMP (ping) back on via a login script in our domain? Thanks for
>> >> any help.
>> >>
>> >
>> > If the users are local admins you can do this using the netsh command.
>> > netsh firewall set icmpsetting type=8 mode=ENABLE
>> >
>> > I would recommend you don't make users local admins, and configure the
>> > changes through a GPO instead.
>> >
>> > --
>> > Andy
- Next message: Marshall: "Roaming profiles .pst local settings folder not backing up."
- Previous message: Scott: "WIN 2003 Web Edition"
- In reply to: jm: "Re: Can SP2 Firewall be configured with Login Script in AD?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
