GPO-supplied Windows Firewall config no longer being applied

Tech-Archive recommends: Fix windows errors by optimizing your registry



I created a GPO some time ago which included some Windows Firewall
exceptions / ports etc. which worked perfectly for months.

Recently, I noticed that they were no longer working (due to an application
on another machine which requires some firewall opening suddenly stopping
working properly).

For a while (just to get it working) I simply stopped the Firewall service
whenever I was using the app (I know it's lazy but it's a home/techies
network anyway!) but now I've started looking at fixing it properly, I'm not
sure what exactly's causing the issue.

From a standard boot, if I start WF locally and look at the exceptions, it
doesn't list any GPO supplied exceptions, only locally created ones.

However, if I run "gpupdate /force /target:computer" on the machine, all the
correct GPOs are assigned and all starts working again. I basically have to
do this each time to get the ports open.

I've run the RSOP wizard (this is on an SBS2003 network FWIW) which
indicates that the GPOs in question don't have any problem. The only GPOs
that aren't listed as applied are those that this machine is out of scope
for (only related to 802.1x certificate stuff for my wireless machines).

Nothing in the eventlogs at either end that I can see related to GP.

Anyone have any suggestions as to what the issue could be?

Regards,

Paul


.



Relevant Pages

  • Re: Question regarding Group Policy appling order
    ... So your firewall is the first that applies, then domain policy. ... default and in the following order: local GPO, site GPOs, domain GPOs, ... I know i mix up computer and user configuration properties in my lab ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question regarding Group Policy appling order
    ... So your firewall is the first that applies, then domain policy. ... default and in the following order: local GPO, site GPOs, domain GPOs, ... in this RSOP user configuration properites window???? ...
    (microsoft.public.windows.server.active_directory)
  • Intermittant GPO failure to apply
    ... We have a problem on our workstations whereby around half of the time the ... GPOs do not apply correctly but running 'GPUpdate /force' always temporarily ... fixes the problem. ... This manifests itself in Windows Firewall problems when the Firewall ...
    (microsoft.public.windows.server.sbs)
  • Enable Remote Desktop and Firewall
    ... I have a WS2K3 server and Windows XP PRO SP1 workstations. ... can enable Remote Desktop and Firewall using GPOs? ...
    (microsoft.public.win2000.active_directory)
  • Re: Firewall Problems With SBS2003 Std Server SP1
    ... now I have to either enter all of the exceptions on the XPSP2 type ... firewall, or get my port and program exceptions built into the ... These ports are needed to communicate with the Symantec Server ...
    (microsoft.public.windows.server.sbs)