Re: XP SP2 Firewall

Hi Andrew.

Try enabling the Group Policy settings for allow local program exceptions
and allow local port exceptions to see if that helps. --- Steve


"AndMart" <aahhrg2REMOVEME@xxxxxxxxxxx> wrote in message
news:MPG.1d6a5fdcd0d17e9f989680@xxxxxxxxxxxxxxxxxxxxxxx
> Hi
>
> I do want the Firewall to run, I just want the local admins to be able
> to change those settings that are not set by Group Policy.
>
> thanks
> Andrew
>
> In article <8DEFD22B-DEB5-483C-A257-F947F8F0EA37@xxxxxxxxxxxxx>,
> VMM@xxxxxxxxxxxxxxxxxxxxxxxxx says...
>> Hi,
>>
>> You shold set to not configured the following policy:
>> Windows Firewall: Protect all network connections under Computer
>> Configuration | Administrative Templates | Network | Network Connections
>> |
>> Windows Firewall | Domain Profile
>>
>> If you disable this policy setting, Windows Firewall does not run. This
>> is
>> the only way to ensure that Windows Firewall does not run and
>> administrators
>> who log on locally cannot start it.
>>
>> If you do not configure this policy setting, administrators can use the
>> Windows Firewall component in Control Panel to turn Windows Firewall on
>> or
>> off, unless the "Prohibit use of Internet Connection Firewall on your DNS
>> domain network" policy setting overrides.
>>
>> Regards,
>> "AndMart" wrote:
>>
>> > Hi
>> >
>> > I have setup a policy to enable Unsolicited Remote Assistance for PCs
>> > within our subnet, which is working fine. However, the local admins
>> > have
>> > noticed that since the policy was deployed they are unable to make
>> > changes to the existing Firewall settings. They can add new exceptions.
>> >
>> > For example, the File & Print sharing option is grayed out but the
>> > Group
>> > Policy column has No.
>> >
>> > I have other policies setup for Remote Desktop and other programs which
>> > all work ok and don't affect the Firewall settings.
>> >
>> > I have checked the GP settings and only those that are required have
>> > been enable, all other settings are Not Configured.
>> >
>> > Can anyone point me in the right direction as to where I should start
>> > looking to try and resolve this ? Is there a GP setting that can
>> > prevent
>> > changes being made in the Firewall Settings?
>> >
>> > thanks
>> > Andrew
>> >
>>


.

Relevant Pages

  • RE: Is Symantec Antivirus 10.1 a usable product?
    ... provide exceptions for 3 or 4 programs. ... Click on the "Application Settings" tab. ... Windows Firewall Group Policy Settings: ...
    (microsoft.public.windows.server.sbs)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)