Re: activating firewall using GPO for windows XP clients

Vic Abrahamian wrote:
Hi Vic,

If I setup two different Firewall configurationi under Domain and
Standard profile in GPO. Will the standard only be enforced when the
PC is not connected to the Domain?

http://download.microsoft.com/download/6/8/a/68a81446-cd73-4a61-8665-8a67781ac4e8/wf_xpsp2.doc#_Toc85246636
Configuration Using Group Policy Settings
To centralize the configuration of large numbers of computers in an organization network that use the Active Directory® directory service, Windows Firewall settings for computers running Windows XP with SP2 can be deployed through Computer Configuration Group Policy. A new set of Computer Configuration Group Policy Windows Firewall settings allow a network administrator to configure Windows Firewall operational modes, excepted traffic, and other settings using a Group Policy object.

When you configure Windows Firewall in an organization network using Group Policy, some of the local Windows Firewall configuration options can be grayed out and unavailable, even for local administrators.

When using the new Windows Firewall Group Policy settings, you can configure two different profiles:

· Domain profile

The domain profile is the set of Windows Firewall settings that are needed when the computer is connected to the network that contains the domain controllers of the organization. For example, the domain profile might contain excepted traffic for the applications needed by a managed computer in an enterprise network.

· Standard profile

The standard profile is the set of Windows Firewall settings that are needed when the computer is not connected to the network that contains the domain controllers of the organization. A good example is when an organization laptop is taken on the road and connects to the Internet using a public broadband or wireless Internet service provider. Because the organization laptop is directly connected to the Internet, the standard profile should contain more restrictive settings than the domain profile.


HTH
Norbert
--
Dilbert's words of wisdom #10: I don't have an attitude problem. You
have a perception problem.

.

Relevant Pages

  • Re: Would like to lockdown public computer
    ... If you use the guest account be ... Learn to use Group Policy. ... > protect the cmos settings as it is easy to reboot a computer from a floppy ... > the mandatory profile on the local computer and then have the users ...
    (microsoft.public.win2000.security)
  • Re: GPInventory
    ... The settings look fine but possibly your Group Policy settings are not ... settings for the computer configuration, ... Windows Firewall: ...
    (microsoft.public.windowsxp.security_admin)
  • RE: group policy
    ... "Windows Firewall" settings should work properly in Group Policy. ... The domain profile settings that are used by the computers when they are ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS control settings on PC
    ... You want to know how to create standard personal settings for all the ... you are unable to create such a profile for all ... settings by using group policy. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS control settings on PC
    ... by setting up personal settings (you can see this small popup windows at the ... minimum settings should i configure on the server using group policy? ... that is to go through to all PCs to set up default profile there. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)