Re: Firewall grayed out in xp after gpupdate /force

Magnetoram wrote:
Thanks for the post. I did disable it using GP. I am not sure what
you mean

Maybe I don't know what you mean either.

If you enable the firewall settings in a Group Policy Object and then
"enable" that policy to be applied to computers, then the firewall settings
will be forced ON and you will not be able to disable it using the
workstation GUI. (Greyed out)

If you disable the firewall settings in a Group Policy Object and then
"enable" that policy to be applied to computers, then the firewall settings
will be forced OFF and you will not be able to enable it using the
workstation GUI. (Greyed out)

There is no middle ground regarding group policy. It's ON or OFF or "not
defined". If it's "not defined" then an Administrator of the computer can
set it on or off at their discretion and it;s not under the control of Group
Policy. (Not Greyed out)

Perhaps clarify which of the above matchs your situation.


"kj" wrote:

Lanwench [MVP - Exchange] wrote:
Magnetoram <Magnetoram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I have disabled the firewall using group policy and gpupdate /force
One machine when not connected to the domain has the firewall
enabled and is grayed out so I cannot disable it. I updated the
group policy and disabled the firewall while connected to the
domain. I need to be able to enable and disable while the client
is using certain software.

In addition to KJ's excellent advice - don't disable it for
software; set exceptions as needed (either locally or via GPO).

Any software
that insists you disable your firewall is software to avoid.

Truer words were (almost) never (written) spoken Lanwench.
--
/kj

--
/kj


.

Relevant Pages

  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... You manage what Group Policy applies to users by where the GPO is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Deploying Application
    ... > had been trying to use the add applications wizard but that didnt' work, ... > there something stupid I could be doing in my group policy that would ... Please run gpupdate on both servers and computers, ... Link this new group policy object Test to Server Management\Advanced ...
    (microsoft.public.windows.server.sbs)
  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... check the domain controller for Group Policy and apply the GPO that is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... check the domain controller for Group Policy and apply the GPO that is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Firewall grayed out in xp after gpupdate /force
    ... It's at the same hierarchical level as the Domain Profile in the Group ... Domain and Standard Profiles for the Windows Firewall. ... If you enable the firewall settings in a Group Policy Object ...
    (microsoft.public.windows.server.sbs)