Re: Windows Firewall through Group Policy
From: Guido G (guidoDOTgrillenmeierAThpANOTHERDOTcom)
Date: 01/28/05
- Next message: Jerold Schulman: "Re: Can Windows 2003 limit Concurrent logon"
- Previous message: Ramanashree: "Renameing the default Attribute"
- In reply to: Mike Brannigan [MSFT]: "Re: Windows Firewall through Group Policy"
- Next in thread: Jobe Gates: "Re: Windows Firewall through Group Policy"
- Reply: Jobe Gates: "Re: Windows Firewall through Group Policy"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 28 Jan 2005 15:12:21 +0100
you don't need to use a site based GPO (which I tend to avoid to use at all)
to achieve this. The Windows Firewall (with XP SP2) supports this feature by
default: it is called 'multiple' profile support. This feature enables XP
machines that are joined to a domain to have a different FW configuration
depending on whether they are connected to a Windows domain or connected to
a network in standalone mode.
You'll see two options in the GPO under Computer Config/Admin
Templates/Network/Network Connections/Windows Firewall
=> Domain Profile
=> Standard Profile
Just configure the Standard Profile to enable the Firewall and the Domain
Profile to disable it.
/Guido
"Mike Brannigan [MSFT]" <mikebran@online.microsoft.com> wrote in message
news:O3xlCoTBFHA.2568@TK2MSFTNGP11.phx.gbl...
> "Jobe Gates" <jgates@someisp.com> wrote in message
> news:Ohtb$iTBFHA.3596@TK2MSFTNGP12.phx.gbl...
> > I'm trying to accomplish the following and wondering if anyone has been
> > able to do so. I want to disable the Windows Firewall when the user
> > connects to our network but when they connect at home I want to enable
it.
> >
>
> Since the home network could be different to the office one in terms of
> subnets then you could potentially use a site based GPO to set the policy
> depending on what "network" they are on.
> --
>
> Regards,
>
> Mike
> --
> Mike Brannigan [Microsoft]
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights
>
> Please note I cannot respond to e-mailed questions, please use these
> newsgroups
>
> "Jobe Gates" <jgates@someisp.com> wrote in message
> news:Ohtb$iTBFHA.3596@TK2MSFTNGP12.phx.gbl...
> > I'm trying to accomplish the following and wondering if anyone has been
> > able to do so. I want to disable the Windows Firewall when the user
> > connects to our network but when they connect at home I want to enable
it.
> >
> > Thanks,
> >
> > Jobe
> >
>
>
- Next message: Jerold Schulman: "Re: Can Windows 2003 limit Concurrent logon"
- Previous message: Ramanashree: "Renameing the default Attribute"
- In reply to: Mike Brannigan [MSFT]: "Re: Windows Firewall through Group Policy"
- Next in thread: Jobe Gates: "Re: Windows Firewall through Group Policy"
- Reply: Jobe Gates: "Re: Windows Firewall through Group Policy"
- Messages sorted by: [ date ] [ thread ]