RE: XP SP2 Firewall

Hi

I do want the Firewall to run, I just want the local admins to be able
to change those settings that are not set by Group Policy.

thanks
Andrew

In article <8DEFD22B-DEB5-483C-A257-F947F8F0EA37@xxxxxxxxxxxxx>,
VMM@xxxxxxxxxxxxxxxxxxxxxxxxx says...
> Hi,
>
> You shold set to not configured the following policy:
> Windows Firewall: Protect all network connections under Computer
> Configuration | Administrative Templates | Network | Network Connections |
> Windows Firewall | Domain Profile
>
> If you disable this policy setting, Windows Firewall does not run. This is
> the only way to ensure that Windows Firewall does not run and administrators
> who log on locally cannot start it.
>
> If you do not configure this policy setting, administrators can use the
> Windows Firewall component in Control Panel to turn Windows Firewall on or
> off, unless the "Prohibit use of Internet Connection Firewall on your DNS
> domain network" policy setting overrides.
>
> Regards,
> "AndMart" wrote:
>
> > Hi
> >
> > I have setup a policy to enable Unsolicited Remote Assistance for PCs
> > within our subnet, which is working fine. However, the local admins have
> > noticed that since the policy was deployed they are unable to make
> > changes to the existing Firewall settings. They can add new exceptions.
> >
> > For example, the File & Print sharing option is grayed out but the Group
> > Policy column has No.
> >
> > I have other policies setup for Remote Desktop and other programs which
> > all work ok and don't affect the Firewall settings.
> >
> > I have checked the GP settings and only those that are required have
> > been enable, all other settings are Not Configured.
> >
> > Can anyone point me in the right direction as to where I should start
> > looking to try and resolve this ? Is there a GP setting that can prevent
> > changes being made in the Firewall Settings?
> >
> > thanks
> > Andrew
> >
>
.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: XP SP2 GPOs missing???
    ... Policy)" and "Windows Firewall: ... settings from being modified on a Windows 2000-based client computer. ...
    (microsoft.public.windows.group_policy)
  • Re: Windows Firewall (WindowsXP SP2)
    ... I've got exactly the same problem with finding the Network settings. ... > for the domain for the Windows Firewall settings under [Computer ... Now we've brought another building online w/ a new subnet. ... opened the group policy - But now those options are nowhere to ...
    (microsoft.public.win2000.group_policy)
  • RE: group policy
    ... Windows firewall seettings should NOT be propagating to any servers. ... COntrollers and server OUs should be set to not allow inheritance. ... is the best policy and makes life SO much easier. ... Based on what you said about the settings having to be under the domain ...
    (microsoft.public.windows.server.sbs)
  • RE: Integrate XP Windows firewall in a W2k domain #4
    ... Ok I created a new policy on with the w2k3 svr in GPOE and now I have those ... I do not have choice of Group Policy Object Editor. ... Firewall selections as laid out by these instructions as the GP (Default ... The best way to manage Windows Firewall settings in an organization network ...
    (microsoft.public.win2000.security)