Firewall policy settings not working

Tech-Archive recommends: Speed Up your PC by fixing your registry



Hi all,

I'm using Group Policy to push out Windows firewall settings to our client
computers. All servers are Windows Server 2003 with the latest GPMC
installed. All clients are running Windows XP SP2.

I am using the File and Printer Sharing (FPS) exception to specify several
subnets in the format 192.168.0.0/24,192.168.1.0/24 and so on.

Most computers adopt the policy well and it works fine. If you check the
settings on Windows firewall on these computers you can see that the FPS
exception is enabled (ticked) and that it has been set by group policy (it
has 'Yes' in the Group Policy column. If you check the scope of the
exception it is correct in displaying the settings pushed out by group
policy.

However some computers don't allow FPS. If you check the settings on Windows
firewall on the the bad computers, the FPS exception is not ticked, but it
still says that it has been set by Group Policy (has a 'Yes' in the Group
Policy column).

gpresult reports that the settings have been applied! RSOP shows that the
setting has been enabled for FPS, but the subnets (scope) is not displayed
on the problematic computers.

Can anyone help to shed some light on this problem? Where should I start
looking?

Thanks and Regards,


Steven


.



Relevant Pages

  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Antivir *usually* does not interfere with the installation of core ... Proxycfg settings WORKED. ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
    (microsoft.public.windowsupdate)
  • RE: Deploy SP2 with Active Directory and GPOs?
    ... In a Windows 2000 or Windows 2003 based domain, ... Group Policy is stored as part of Active ... publish programs to users or computers in the Windows 2000 or Windows 2003 ... After the installation files have been prepared, ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Proxycfg settings WORKED. ... Microsoft Windows 2000 Operating System Group Policy Result tool ... The user is a member of the following security groups: ...
    (microsoft.public.windowsupdate)
  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: How do I turn off SP2 firewal Group Policy setting
    ... I followed the instructions, but when I go to modify Group Policy, all ... settings are Not Configured Already. ... > Windows XP SP2 client computer in the SBS domain. ... > Firewall for client computers that are running Windows XP Professional. ...
    (microsoft.public.windows.server.sbs)