Re: windows firewall

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I think at this point, you might want to consider doing a network trace to ensure that it really is a port-blocking problem, that is, if you're SURE you set up the firewall exceptions correctly. Can you post the strings you used in your exceptions here? They can be tricky and they don't get validated when they're entered.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com



"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:Osp8CejEHHA.4256@xxxxxxxxxxxxxxxxxxxxxxx
Well, taking your assessment at face value to be correct as
you report, I can only say I have never seen the behavior and
so have no suggestions on what is causal or how to resolve.


"chriske911" <chriske911nospam@xxxxxxxxx> wrote in message news:mn.da3a7d6b29cea649.52299@xxxxxxxxxxxx
Roger Abell [MVP] presented the following explanation :
Use the resultant policy capability in GPMC to see what is
actually being seen and applied by the XP Clients.
Also, check that you have set the firewall policies for the
domain environment rather than for the stand-alone, and
that the clients are seeing the domain during their boot.

"chriske911" <chriske911nospam@xxxxxxxxx> wrote in message news:mn.c3897d6b76f835d8.52299@xxxxxxxxxxxx
we are just deploying windows xp as the lead OS
therefore I would like to activate the builtin firewall and set exceptions globally for several client and remote tools
the problem lies in the fact that the actual settings on the clients are almost opposite to what I have set in the policy
for example: file and printer sharing is disabled and not editable to administrators
helpdesk.exe is an exception with an ANY scope despite my custom list within the policy
and so on

what could be causing this?
there are no higher policies defining the firewall settings

grtz



I have checked the RSOP and I am getting the policy applied as intended
still the custom programs as well as the built in exceptions are doing exactly the opposite of what I have set in the GPO

I have set the standard and the domain profile exactly the same

thnx





.



Relevant Pages

  • Re: Windows firewall on clients
    ... actually I was wanting to run Zonealarm on the clients as it is ... > you'll see the "Small Business Server Windows Firewall" policy. ... and the setting cant be modified locally. ...
    (microsoft.public.windows.server.sbs)
  • Re: [fw-wiz] Security and Audit Policy
    ... Enabling firewall rules without a solid security policy and management ... nameserver (I don't like clients resolving directly in any circumstance.) ...
    (Firewall-Wizards)
  • Re: Fw: Serious Security Issue in Windows XP SP2s Firewall
    ... > If the system is a domain member, exceptions for F&P Sharing will be enabled ... This applies to all interfaces. ... These two policy sets conflict. ... > not have NB filtered by the firewall. ...
    (Focus-Microsoft)
  • Re: windows firewall
    ... check that you have set the firewall policies for the ... that the clients are seeing the domain during their boot. ... almost opposite to what I have set in the policy ... still the custom programs as well as the built in exceptions are doing ...
    (microsoft.public.windows.group_policy)
  • Re: server firewall
    ... If you want to disable personal firewall settings locate the policy that is ... Refresh the policy on the clients once you are done editing it. ...
    (microsoft.public.windows.server.setup)