Re: Turning off Win XP firewall

Enforced policies override other policies with the same setting applied
after that one.
For example:
In domain policy you have 1 policy option that says "Setting01=TRUE"
then in the OU
you have another policy that says "Setting01=FALSE"
the Option "Setting01=FALSE" wins because the policies are applied in the
following order:
Local Policy -> Site -> Domain -> OU -> Sub OU, etc...

But if you enforce the domain policy in this case the "Setting01=TRUE" wins
because is being enforced.

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Bay Clerk" <BayClerk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5038D239-7CE8-4EEA-BE4E-E7473E8E23D7@xxxxxxxxxxxxxxxx
When I click on the GPO it shows that it is linked to my domain. It shows
link enabled, path is my domain, location is my domain and enforced is no.
What is enforced?

Thanks,


"Jorge Silva" wrote:

-Where did you linked the GPO that disables the FW?
- Run the RsOP.msc from the workstation cmd line.
-The RSOP.msc shows you what policies are being applied at that
workstation,
but you can't use it to change the policy, is just a tool that allows you
to
see if the policy that you created in the domain is in fact being
applied.

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Bay Clerk" <BayClerk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A1E4CED5-8C08-4F70-9994-F889A3B1F3B5@xxxxxxxxxxxxxxxx
Jorge thanks for your help.

I can see my folder redirect that was created but I don't see the
administrative template tab that allows you to disable the firewall
when I
run Rsop.msc. I only have one OU and I am guessing that since the
redirect
is
showing it should be linked. Is that correct, if not how can I tell for
sure
if it is linked.

Thanks,




"Jorge Silva" wrote:

- Make sure that GPO is linked to the correct OU, where the
Workstations
are.
- Run from cmd, -> gpupdate /force
- Check if the GPO is being applied by using Rsop.msc on the
Workstations.
- Also search for errors in eventlog
--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Bay Clerk" <BayClerk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D6E36EDE-5E32-4493-916B-544F94055C54@xxxxxxxxxxxxxxxx
GPO is where I made the changes listed. I am using the GPM snap in
msc.

Bay Clerk

"Jorge Silva" wrote:

Hi
You can use GPO to disable the FW on these workstations.

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Bay Clerk" <Bay Clerk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8333C325-8E18-4DAB-ADFF-6548D47C1A44@xxxxxxxxxxxxxxxx
I have set the state of Windows Firewall: Protect all network
connections
to
disabled under computer configuration\ administrative
templates\windows
firewall\domain profile but the firewalls are still on even after
rebooting.
Any ideas as to why, I have some other modifications in the
policy
and
they
work, redirect for example.

Any help would be appreciated.












.

Relevant Pages

  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.win2000.group_policy)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.windows.group_policy)
  • Re: Simple question on Group Policy, Password policy and blocking inheritance
    ... My point was that you can use fine-grained password policies to specify multiple password policies and apply different password restrictions and account lockout policies to different sets of users within a single domain, ... > trying to enforce a password policy for the entire company. ... create a policy and make sure that is linked at domain level. ... > restoring their 'Default Domain Policy' and 'Default Domain Controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Anyone can explain mechanism, time to get this policy updated?
    ... "Jorge Silva" wrote: ... a policy to "EnableMSFirewall". ... Immediately after moving the computer account from OUA to OUB, ... For some policies you'll need the next policy refresh time, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating new Servers
    ... > Organization into this Policy container. ... > is necessary to set the same settings on multiple stores and enforce them ... > This can be achieved using system policies. ... > object of its own type in the organisation that you have administrator ...
    (microsoft.public.exchange.admin)