RE: group policy

Ok I might have to clarify a little further.
We already manage our windows firewall settings on the local computers by
group policy (Specifically the 'windows firewall' group policy in SBS
server.) running a resultant set of policies on a particular user returns
that they have the named policy running as the winning policy.
However on the client computer if i open control panel, then windows
firewall, exceptions tab the remote desktop and print and file sharing
exception entries are there however they are greyed out and under the column
group policy the corresponding entry for the two exceptions is 'yes'.
Basically i gather this means that the two entries are managed by group
policy.
So what i might do is reset all the windows firewall exception settings to
not configured. I know this is going to cause extra headache because it will
also cut off the rest of the exceptions that are ticked even though they are
managed by group policy, but if it has to be done it has to be done.
I was hoping to be able to find a work around. as i said in my previous
post, (linked to group policy display issues) they may be related issues.
thanks
Marcus

"Steven Zhu [MSFT]" wrote:

Hi Marcus,

Thanks for posting here.

From your post, I understand that you find File and Printer sharing/Remote
Desktop managed by Group Policy in the Windows Firewall, but the entries
are not checked, then you want to know how to check the box. If I am off
base, please feel free to let me know.

Actually, To centralize the configuration of large numbers of computers in
an organization network that use the Active Directory? directory service,
Windows Firewall settings for computers running Windows XP with SP2 can be
deployed through Computer Configuration Group Policy.

When you configure Windows Firewall in an organization network using Group
Policy, some of the local Windows Firewall configuration options can be
grayed out and unavailable, even for local administrators.

So if you already configured Windows Firewall for your Windows XP
workstations using Group Policy, you only return the all of Windows
Firewall configuration in Group Policy from Enabled to Not Configured. Then
the Windows XP workstation can control this configuration themselves. For
detail information, please refer the following technology article:

http://download.microsoft.com/download/6/8/a/68a81446-cd73-4a61-8665-8a67781
ac4e8/wf_xpsp2.doc#_Toc85246636

Note: please refer the following part in the above article:
Deploying Windows Firewall Settings with Group Policy
Step 2: Specifying Windows Firewall Settings for Your Group Policy Objects

I hope the above information helps.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================








.

Relevant Pages

  • Re: DC dis-allowing remote desktop
    ... Disable the Windows Firewall on those computers if it ... does not pose a risk or create needed exceptions such as for Remote Desktop. ... You may have to modify or disable the Group Policy managing the Windows ...
    (microsoft.public.windows.server.sbs)
  • RE: Integrate XP Windows firewall in a W2k domain #3
    ... I do not have choice of Group Policy Object Editor. ... It has the GPOE but does NOT have the Network, Network Connections, ... The best way to manage Windows Firewall settings in an organization network ...
    (microsoft.public.win2000.security)
  • RE: Group Polcy: in use by another application
    ... Itunes application run on the client workstation, or you hope use the GPO ... then you need use the Windows Firewall setting in GPO to reach this goal. ... Deploying Windows Firewall Settings with Group Policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Integrate XP Windows firewall in a W2k domain #4
    ... Management Console on the XP Pro computer that you are using to manage Group ... XP Pro computers will be helpful in troubleshooting Group Policy issues. ... The best way to manage Windows Firewall settings in an organization ...
    (microsoft.public.win2000.security)
  • Offer Remote Assistance - "Permission denied" - Windows XP SP2
    ... We are having problems getting "Offer Remote Assistance" to work in our ... Administrators group on all computers with the \format to ... the Group Policy above ... - Opened all of the items below in the Windows Firewall through Group ...
    (microsoft.public.windowsxp.work_remotely)