RE: XP SP2 Firewall

hi,

Sorry, my first reply was directed to another post.
If you enable the settings of Steven post you will be able to add new port
exceptions and new program exceptions but i think you cannot modify none of
the exceptions defined by the GPO.

Regards,


"AndMart" wrote:

> Hi
>
> I do want the Firewall to run, I just want the local admins to be able
> to change those settings that are not set by Group Policy.
>
> thanks
> Andrew
>
> In article <8DEFD22B-DEB5-483C-A257-F947F8F0EA37@xxxxxxxxxxxxx>,
> VMM@xxxxxxxxxxxxxxxxxxxxxxxxx says...
> > Hi,
> >
> > You shold set to not configured the following policy:
> > Windows Firewall: Protect all network connections under Computer
> > Configuration | Administrative Templates | Network | Network Connections |
> > Windows Firewall | Domain Profile
> >
> > If you disable this policy setting, Windows Firewall does not run. This is
> > the only way to ensure that Windows Firewall does not run and administrators
> > who log on locally cannot start it.
> >
> > If you do not configure this policy setting, administrators can use the
> > Windows Firewall component in Control Panel to turn Windows Firewall on or
> > off, unless the "Prohibit use of Internet Connection Firewall on your DNS
> > domain network" policy setting overrides.
> >
> > Regards,
> > "AndMart" wrote:
> >
> > > Hi
> > >
> > > I have setup a policy to enable Unsolicited Remote Assistance for PCs
> > > within our subnet, which is working fine. However, the local admins have
> > > noticed that since the policy was deployed they are unable to make
> > > changes to the existing Firewall settings. They can add new exceptions.
> > >
> > > For example, the File & Print sharing option is grayed out but the Group
> > > Policy column has No.
> > >
> > > I have other policies setup for Remote Desktop and other programs which
> > > all work ok and don't affect the Firewall settings.
> > >
> > > I have checked the GP settings and only those that are required have
> > > been enable, all other settings are Not Configured.
> > >
> > > Can anyone point me in the right direction as to where I should start
> > > looking to try and resolve this ? Is there a GP setting that can prevent
> > > changes being made in the Firewall Settings?
> > >
> > > thanks
> > > Andrew
> > >
> >
>
.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: Windows Firewall (WindowsXP SP2)
    ... I've got exactly the same problem with finding the Network settings. ... > for the domain for the Windows Firewall settings under [Computer ... Now we've brought another building online w/ a new subnet. ... opened the group policy - But now those options are nowhere to ...
    (microsoft.public.win2000.group_policy)
  • Re: XP SP2 Firewall
    ... Try enabling the Group Policy settings for allow local program exceptions ... >> Windows Firewall: Protect all network connections under Computer ...
    (microsoft.public.windows.group_policy)
  • Re: GPInventory
    ... The settings look fine but possibly your Group Policy settings are not ... settings for the computer configuration, ... Windows Firewall: ...
    (microsoft.public.windowsxp.security_admin)
  • RE: XP SP2 Firewall
    ... Windows Firewall: Protect all network connections under Computer ... Windows Firewall | Domain Profile ... If you disable this policy setting, ... > all work ok and don't affect the Firewall settings. ...
    (microsoft.public.windows.group_policy)