Re: How to allow client to disable firewall on XP/sp2 machine
- From: "Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 28 Dec 2007 17:00:40 -0500
My first question would be this: instead of disabling the firewall, can you
have someone with local admin rights log onto the laptop, and manually
configure exceptions to accommodate your software application? It'll retain
the manually configured exceptions, while still using everything that's set
in group policy.
Aside from the fact that doing it that way would be more secure than
completely disabling it, it'll be a fair amount of work to allow disabling
only on certain machines. There are a number of ways of doing it, but I
have not been able to think of a very elegant one. You could move the
laptops in question to their own OU, then apply the existing policy to the
other PCs instead of domain wide, creating a second set of policies for the
laptop OU. You could use security filtering to apply the existing policies
only to a security group that does not include the laptops. I'm sure there
are other ways - I'm just not crazy about any of the ones I've been able to
think of.
The specific setting that allows you to turn off the firewall is (not
surprisingly) in the policy called Small Business Server Windows Firewall.
It's under Computer Config -> Administrative Templates -> Network -> Network
Connections -> Windows Firewall. It's under both the Domain and Standard
Profiles, and it's called "Protect all network connections." All of these
settings have additional information if you open the setting, which might be
enough information for you to make decisions about which settings you want
(use Extended View in the GP editor to see it). You can set it in either
the domain or standard profile - standard applies when not connected to the
domain at login.
"Barry B." <BarryB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6AADED42-0632-4E9D-8BCB-DA4ACC98AE54@xxxxxxxxxxxxxxxx
We have a laptop running XP-SP2 that needs to be able to turn off the
Windows
Firewall when using the laptop for some PBX software installation tasks
that
we do on a regular basis. The laptop also has MS Firewall Client for ISA
2004 installed. The server is SBS2003. Are there any articles or other
instructions available to help me change the GP settings that control
this?
Thanks for any suggestions.
Barry Brown
Mountain Telecom
.
- Follow-Ups:
- Prev by Date: Re: Hard drive not showing up
- Next by Date: Re: SBS 2003 and Windows Server 2008 Beta 3 in the same network
- Previous by thread: Re: RWW and OWA not working
- Next by thread: Re: How to allow client to disable firewall on XP/sp2 machine
- Index(es):
Relevant Pages
|
