Re: Installation of XP SP2 prevents access to SBS 2K3 Exchange?

From: Tom (Tom_at_discussions.microsoft.com)
Date: 11/29/04


Date: Mon, 29 Nov 2004 01:29:01 -0800

Thank you for your detailed answer. This friday (5th of december) we will
re-install my server (among other things I managed to delete "my company
web", schhhh..),
and then I will try to upgrade one of my clients to sp2.
I'm not familiar with linking or unlinking gpo:s. Could you please tell me
where I start?
What I've noticed the first time, was that a lot of settings on the client's
fw was indeed greyed-out. At the top of the program window there was
information about a GPO-setting that overruled all other settings, just as
you said.
I will keep you informed with a more detailed description ASAP.
until then..
have a nice day!
Tom

"Mariette Knap [SBS MVP]" wrote:

> In news:0D456BA7-D029-41D3-8D94-F2541718D5A4@microsoft.com,
> Tom <Tom@discussions.microsoft.com> wrote:
>
> > We have a permanent, public wan IP-address in our network and we are
> > using sbs 2k3 server and exchange/outlook 2003. All our clients are
> > winxp pro.
> > I installed xp/sp2 on a test-client in my network, and everything
> > worked ok until I tried to access my mail which didn't work.. I
> > suspected that perhaps windows firewall was the culprit, but I was
> > not able to change any settings on my client, nor did I manage to
> > shut down the firewall. I think that a new GPO has been created, thus
> > prohibiting anyone to change anything concerning windows firewall.
> > 1) I wan't to access my mail
> > 2) I want the domain-admin (me, of course :)) to be able to log in and
> > change fw-settings.
> > How do I proceed? I would be very grateful for any suggestions.
> > Yours truly
>
> Hi Tom,
>
> By default the new Firewall GPO is linked to the top of the domain which
> means that all users and computers will get this policy pushed and forced.
> If you want to logon to a workstation with the Domain Administrator
> credentials and not have this GPO applied you can unlink the GPO where it is
> now and link it to the Smallbusiness OU.
>
> You have to be aware of the fact that this can cause security risks. Not
> having the new Firewall GPO applied to the workstations is considered bad
> practice though I can understand why you want this. I do this myself all the
> time :-) Do not tell anybody...
>
> The other issue you have is a bit strange. If this behaviour occurs can you
> browse the server and ping the server? If you look into the Firewall
> settings on that specific client what do you see in the exceptions? There
> should be a lot of settings there greyed out; Applied by GPO should mention
> Yes. If this is not the case you can try to run:
>
> gpupdate /force
>
> from the command prompt. You will be asked to logoff and logon again. I
> always reboot the client after doing this.
>
> Let me know if the above has helped you?
>
> --
> Mariƫtte Knap - MVP
> http://www.smallbizserver.net
> Take part in SBS forum:
> http://www.smallbizserver.net/Default.aspx?tabid=154
>
>
>



Relevant Pages

  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... all the settings for lockdown in it. ... I think you are on to something with the linking of the GPO. ... > OU to which the loopback GPO is linked, ... > OU you placed the TS server, and you set loopback on in replace ...
    (microsoft.public.windows.group_policy)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... GPO security settings from the defauts. ... Restart the workstation computer and the Terminal server, ... I've chosen these settings only because the affect is easy to observe. ... add check mark in the Deny column for Apply Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy Firewall Exception Problem
    ... the domain ends up with two sets of firewall settings. ... I have set up about a dozen or more Windows 2003, R2 servers on our AD ... and those OUs had a common GPO linked to them. ...
    (microsoft.public.windows.group_policy)
  • Re: laptops connect at work but not at home?
    ... > i'll try to disable the DNS-related settings in the GPO and see what ... machine joined to the NT4 domain exhibited this behavior after the NT4 ... But now that server runs W2K3, ... >> sub-OU under the OU with the GPO to get it to work. ...
    (microsoft.public.win2000.dns)
  • RE: [fw-wiz] Re: Sun FTP Server and Firewall-1 4.1 (Richard Worwood)
    ... FW-1 v 4.1 has configurable TCP timeout settings, ... timeout setting in the firewall properties and you will be fine. ... > with the standard FTP server. ...
    (Firewall-Wizards)