Re: Disabling ICF through GPO

From: Phillip Windell (_at_.)
Date: 09/02/04


Date: Thu, 2 Sep 2004 08:22:46 -0500

Yes. I first pre-created a "Firewall GPO" on the server then I just opened
MMC on an XP-SP2 machine and used it's MMC to edit the GPO I had created on
the Server (DC). The Servers may need a patch to recognize the GPOs
created by the newer XP-SP2 editor. The patch is found by finding the KB
Article KB842933.

There is more to this than "meets the eye",...you need to get a hold of and
study the White Paper called,

"Deploying Windows Firewall Settings for Microsoft Windows XP with Service
Pack 2"

I don't have a link to it, but it shouldn't be hard to find. Note: The WP
doesn't mention the patch from KB842933,...I had to find that out the hard
way.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
"Will Wally" <ads@ad.org> wrote in message
news:%23qoL9Z4iEHA.2812@tk2msftngp13.phx.gbl...
> I have a Windows 2003 network. All of the workstations are Windows XP Pro.
> They are all managed through Group Policies. We are testing Windows XP SP2
> and are having a lot of issues that pertain to the Internet Connection
> Firewall that gets loaded by default. Is it possible to turn the ICF off
via
> a Group Policy?
>
>


Relevant Pages

  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: login attempts
    ... > Every day i have on my win2000 iternet server a lots of wrong login ... Windows by default allows ... You also need a firewall. ... the internet, except for those ports you know you're using. ...
    (microsoft.public.win2000.security)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • [NT] Vulnerability in Server Service Allows Code Execution (MS08-067)
    ... Vulnerability in Server Service Allows Code Execution ... This security update resolves a privately reported vulnerability in the ... Windows 2000, Windows XP, and Windows Server 2003 systems, an attacker ... Firewall best practices and standard default ...
    (Securiteam)
  • Re: NETFW.INF, Preconfigured Firewall settings and dialogs
    ... it is Windows Server 2003 SP1 firewall that i'm using. ... Using the document '832017 Port Requirements for the Microsoft Windows ... > to achieve the following goal: some ports are open by default and others ...
    (microsoft.public.windows.server.networking)