Re: "Access Denied" to local machine mgmt console

Tech-Archive recommends: Fix windows errors by optimizing your registry

In news:1166820088.372400.141890@xxxxxxxxxxxxxxxxxxxxxxxxxxx,
MandG <gscanga@xxxxxxxxx> stated, which I commented on below:

I think I may be onto something with the Access Denied issues. As I
stated earlier this is a W2K DC but all clients are XP machines. XP
machines have a built-in firewall that, in some cases, may be blocking
me from accessing/managing them from the W2K based DC.

First, does that make sense to anyone else?

And second, can I create a GPO on W2K server that will disable the XP
client side firewall?

The firewall could be causing it.You'll need to open and allow ports TCP
3389 and UDP 3389.

You may have to install an ADM template, but can't remember. The first
article discusses it. Win2003 is no problem. Check to make sure by creating
a new OU and create a test GPO. Drill down (going by memory) in the Computer
section, Adminsitrative Templates, Network, Interfaces. You should see a
Domain Firewall and Local Firewall. Choose the Domain Firewall. If it
exists, then the options are all there.

Here's some more info on it:

Configuring Windows Firewall in a Small Business Environment Using Group
Policy:
http://www.microsoft.com/technet/security/smallbusiness/prodtech/windowsxp/fwgrppol.mspx

Managing Windows XP Service Pack 2 Features Using Group PolicyDeploying
Group Policy Settings in SP2:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx

Windows Server Reference Guide How Group Policy Enables Remote Firewall
Control:
http://www.informit.com/guides/content.asp?g=windowsserver&seqNum=189&rl=1

Ace





.

Relevant Pages

  • Re: Opening Ports on Firewall
    ... the antivirus admin server to WAN clients, those clients need a certain few ... ports open on the XP firewall. ... Mark Heitbrink - MVP Windows Server - Group Policy ...
    (microsoft.public.win2000.group_policy)
  • Re: XP machine removed from domain still gets domain policy
    ... then turn off the firewall. ... Prohibit use of the Internet Connection Firewall on your DNS domain network? ... Firewall settings), the Firewall settings revert back to the default and ... the only Group Policy being applied is the "Local Group Policy" ...
    (microsoft.public.windows.group_policy)
  • Re: Using XP firewall in a domain
    ... > I want to protect all my Windows XP professional clients within the domain ... > and am using Windows 2003 as my domain controller. ... Traditional wisdom had a firewall at the network perimiter, ... This provided unfettered communication between internal machines. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Firewall grayed out in xp after gpupdate /force
    ... machines but not on the one I mentioned. ... Then check for event log entries about group policy failures. ... If you enable the firewall settings in a Group Policy Object and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Network Services/NT Authority
    ... OK that is what I though in that you did not change any Group Policy ... settings but instead were managing the Windows Firewall settings and no you ... logon which is normal as your computer really is on a network - the ... ICMP and then the option to reset all the firewall ...
    (microsoft.public.windowsxp.security_admin)