Re: Windows firewall GPO

kj [SBS MVP] wrote:
Lanwench [MVP - Exchange] wrote:
Simon wrote:
Lanwench [MVP - Exchange] wrote:
Simon wrote:
Lanwench [MVP - Exchange] wrote:
Simon wrote:
Hi,
What is the easiest way to allow user control over the windows
firewall with sbs2003 ? I have a client (home user with SBS) that
wants control over this ?
GPO's are still something I need to get to grips with, so sorry
for what is probably a daft question.
Thanks Simon
You'd have to exclude their computer from that policy. What
exactly is it the user wants to do? Why not set exceptions?


He's convinced that this is causing him problems with his norton
360 software that he's insisted on using.
Ugh.

I'd just like to give him the ability to turn the windows firewall
off. thanks
If it's just for this PC, stop and/or disable the underlying windows
service and have him test whatever he wants You can't give him
rights to change this unless you give all users the right to change
this by modifying the policy. Also explain to him that you can't
have two firewall products active
at once, so if Norton has one and he's installed it, it should be
taking precedence. AFAIK.


It's a home user with SBS, him and his wife. If this was a company I
wouldn't go down this route. How do I modify/remove the policy so he
can ? thanks
Open gpmc.msc on the server and you'll see the policy in question -
unlink it. :-)

A better way would be to do security filtering on that policy for that computer / user so that the remaining computer / users still have the benifit of having the firewall enabled.

http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html


Thanks, but as stated it's a home setup and it's his call.
simon
.

Relevant Pages

  • Re: Windows firewall GPO
    ... What is the easiest way to allow user control over the windows ... You'd have to exclude their computer from that policy. ... Also explain to him that you can't have two firewall products active at once, so if Norton has one and he's installed it, it should be taking precedence. ... It's a home user with SBS, ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows firewall GPO
    ... What is the easiest way to allow user control over the windows ... You'd have to exclude their computer from that policy. ... Also explain to him that you can't have two firewall products active ... It's a home user with SBS, ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows firewall GPO
    ... You'd have to exclude their computer from that policy. ... have two firewall products active ... It's a home user with SBS, ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows firewall GPO
    ... You'd have to exclude their computer from that policy. ... firewall products active ... It's a home user with SBS, ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot get Windows XP Firewall to turn off on a Win2003 SBS Domain
    ... WHY do you want to turn off the XP firewall? ... Take part in SBS forum: ... > connection properties window says that a group policy is controlling some ...
    (microsoft.public.windows.server.sbs)
Quantcast