Re: Roaming Profiles and ICF
- From: jilltre <jilltre@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 14 Apr 2006 15:40:02 -0700
I didn't see anything in your replies that indicated a different path to try,
or a suggestion as to what may be wrong...
--
jilltre
"Lanwench [MVP - Exchange]" wrote:
.
In news:78495113-C257-4A34-A4EA-F601AC886792@xxxxxxxxxxxxx,
jilltre <jilltre@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Thanks for the reply. I did find out that it is the individual user
computers that have the ICF enabled via a group policy.
Right.
It cannot be
disabled via the user,
Well - you can log in as an account with local admin rights and stop the
underlying Windows service as a test.
but through the group policy.. I found this
article:
Right, but again, this is *not relevant* - the windows firewall on the
client workstations is *not* the cause of your profile problem.
http://www.windowsecurity.com/articles/customizing-Windows-Firewall.html
It gives the instructions I need to change the policy... I'm just
waiting for permisssions from the head honchos to do this...
No - don't. It is not the cause of your problem.
Since we are already behind two firewalls (isp and our sonicwall), i
don't see the need to have this enabled on the users computers...
Worms/trojans/whatnot can easily get onto your computers from one sales guy
plugging in his laptop. I would leave the firewall enabled.
especially if they want roaming profiles.
Again, this is not the source of your problem. Something else is wrong. You
need to pull back and start looking at this with fresh eyes, as it were....I
don't think you've really been reading my replies fully. :)
j
In news:24396720-BFA5-4458-BDA2-5C8E4A64EDD5@xxxxxxxxxxxxx,
jilltre <jilltre@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
okay,, more information... it appears its not the server that I need
to disable the ICF but the computer where the original profile is
located... in this case, mine.
Hmm. No, the Windows firewall protects inbound traffic only. Do you
even have the Windows firewall on your server? I don't....and
wouldn't. If you do, disable it - either use ISA or an
Internet-facing firewall or both.
When I try to disable the ICF, it is grayed out.. so, there is a
group policy enforcing the ICF to be turned on... where in the
group policy mgmt list do I disable this?
The workstations don't need to have the firewall disabled for this
purpose.
Thanks for the info... i'm going by what this article states:
KB832850
it shows the error message I am receiving, and the resolution is
disable the ICF...
I am using SBS, so maybe it's slightly different from winServ2k3...
--
jilltre
"Lanwench [MVP - Exchange]" wrote:
In news:CA752041-859A-41EF-AF35-BB9A5940FEA0@xxxxxxxxxxxxx,
jilltre <jilltre@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I know this is a loaded question. I've got some users (vice
president of company) who would like to have roaming profiles...
but, the known issue is that if the ICF is turned on, the
profiles cannot be saved to the server...
If I have a firewall at the ISP level, and we also have our own
firewall (SonicWall),,is ICF needed? I know that Microsoft has to
not recommend turning it off, but what are the opinions out
there? Is it really too risky to turn it off for this one
function?
I'm not sure what's going on on your network, but I use roaming
profiles, and I have the Windows firewall enabled on all
workstations, and it works fine.
- Follow-Ups:
- Re: Roaming Profiles and ICF
- From: Lanwench [MVP - Exchange]
- Re: Roaming Profiles and ICF
- References:
- Re: Roaming Profiles and ICF
- From: Lanwench [MVP - Exchange]
- Re: Roaming Profiles and ICF
- From: Lanwench [MVP - Exchange]
- Re: Roaming Profiles and ICF
- From: jilltre
- Re: Roaming Profiles and ICF
- From: Lanwench [MVP - Exchange]
- Re: Roaming Profiles and ICF
- Prev by Date: Re: Web Sharing Not Visable on Share Point Site
- Next by Date: Re: WSUS Detect Problems
- Previous by thread: Re: Roaming Profiles and ICF
- Next by thread: Re: Roaming Profiles and ICF
- Index(es):
Relevant Pages
|
