Need Troubleshooting tips for GP deployment failure

pmulvane_at_law.tulane.edu
Date: 01/10/05 

Date: Mon, 10 Jan 2005 15:03:31 -0600

We have been rolling out SP2 within our network (+300 PCs) and have
run into a hitch with Port exceptions to the firewall that are needed
for administrative use. These Windows Firewall Port exceptions are
being delivered via Group Policy to some but not all PCs. The PCs that
are receiving the Policy settings are not opening the Ports. They are
in the Registry as they should be but when the Port Exceptions are
checked within the Firewall settings, none are listed.

 

We have checked for ICMP interference (i.e. forwarding disabled or
restricted) and this doesn't seem to be the problem. It seems that
while some machines are recieving the Port exceptions, none of our PCs
are getting the entire Policy package (Default Domain Policy).

 

We have tried all of the suggestions easily obtained through a Google
search on the issue with no progress and could use some
troubleshooting advice to get this resolved.

Relevant Pages

  • Re: Need Troubleshooting tips for GP deployment failure
    ... it indicates that the correct Policies are ... >> run into a hitch with Port exceptions to the firewall that are needed ... >> being delivered via Group Policy to some but not all PCs. ...
    (microsoft.public.win2000.group_policy)
  • Unrestrict XP SP@ firewall on one client
    ... Is it possible to unrestrict the XP firewall on just one client with Group ... port exceptions I can also set in group policy. ... I have enabled the allow port exceptions as well as application exceptions ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy - WinXp firewall
    ... I am looking for the one that will Define Port Exceptions through a Group Policy Setting at the server for a group of connected computers. ... The DB vendor first suggested that the Xp firewall be turned off, but then setteled on having TCP port 6719 open in both directions at each client PC and the server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Group policy not being inherited by clients?!?!
    ... I'm adding the port exceptions in Windows Firewall for Symantec ... What policy are you modifying, or are you creating/linking your own? ...
    (microsoft.public.windows.server.sbs)
  • Re: "updated" Group Policy Editor for SBS 2003?
    ... In the new policy there is an item to "allow local port exceptions" where ... the "explain" box states that there should also be a "port exceptions ... policy" where inbound port exceptons can be configure by policy rather than ... the SBS group policy editor warns about several entries being ...
    (microsoft.public.windows.server.sbs)