RE: XP SP2 Firewall

Hi,

You shold set to not configured the following policy:
Windows Firewall: Protect all network connections under Computer
Configuration | Administrative Templates | Network | Network Connections |
Windows Firewall | Domain Profile

If you disable this policy setting, Windows Firewall does not run. This is
the only way to ensure that Windows Firewall does not run and administrators
who log on locally cannot start it.

If you do not configure this policy setting, administrators can use the
Windows Firewall component in Control Panel to turn Windows Firewall on or
off, unless the "Prohibit use of Internet Connection Firewall on your DNS
domain network" policy setting overrides.

Regards,
"AndMart" wrote:

> Hi
>
> I have setup a policy to enable Unsolicited Remote Assistance for PCs
> within our subnet, which is working fine. However, the local admins have
> noticed that since the policy was deployed they are unable to make
> changes to the existing Firewall settings. They can add new exceptions.
>
> For example, the File & Print sharing option is grayed out but the Group
> Policy column has No.
>
> I have other policies setup for Remote Desktop and other programs which
> all work ok and don't affect the Firewall settings.
>
> I have checked the GP settings and only those that are required have
> been enable, all other settings are Not Configured.
>
> Can anyone point me in the right direction as to where I should start
> looking to try and resolve this ? Is there a GP setting that can prevent
> changes being made in the Firewall Settings?
>
> thanks
> Andrew
>
.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • RE: group policy
    ... Windows firewall seettings should NOT be propagating to any servers. ... COntrollers and server OUs should be set to not allow inheritance. ... is the best policy and makes life SO much easier. ... Based on what you said about the settings having to be under the domain ...
    (microsoft.public.windows.server.sbs)
  • Re: XP SP2 Firewall
    ... Try enabling the Group Policy settings for allow local program exceptions ... >> Windows Firewall: Protect all network connections under Computer ...
    (microsoft.public.windows.group_policy)
  • Re: DEFINING Port Execptions Through Group Policy
    ... Excerts from the policy follow. ... exceptions list defined by Group Policy. ... port is blocked by another policy setting, such as the "Windows Firewall: ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Firewall (WindowsXP SP2)
    ... I've got exactly the same problem with finding the Network settings. ... > for the domain for the Windows Firewall settings under [Computer ... Now we've brought another building online w/ a new subnet. ... opened the group policy - But now those options are nowhere to ...
    (microsoft.public.win2000.group_policy)