Re: How to detect if the Windows XP firewall is enabled on my LAN computers ?

Hi,

thanks for your answer.
I am not able to configure a firewall GPO for them because GPO are not applied on their computer because the firewall is enabled (and not configured to allow trafic needed by GPO).

Disabling computer accounts is a hard method but should work effectively; I will deep further into this direction.

I will also try with NMAP and the OS Fingerprint that would be able to show me those computers.

If you have others ideas, please let me know ! ;-)

Thanks !

Hello Eric,

You are the domain admin, so configure your firewall with GPO according to the document (see link) and collect all the machines that you can't ping. Or do it the harder way, disable the computer accounts in AD, so that the users of that machines have to call your helpdesk and then you can enable the firewall and get the GPO running. Ofcourse talk to your boss for the disabling, so that you are on the safe site.

http://technet.microsoft.com/en-us/library/bb490626.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hi,

a lot of users in our LAN have admin rights (I know it's bad but
please it is like that, so please dont blame me about that ;-)).

Some of them have the Windows XP firewall enabled and not configured
correctly. By the way, I am not able to detect those computers on the
network through a ping and I cannot force a group policy because the
firewall is blocking the trafic too; neither remotely request a
service state etc...

My question is : How can I detect computers that are running XP
firewall ?

Thanks in advance


--
Eric


.

Relevant Pages

  • Re: allow standard user to install drivers
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: SECURITE ... GPO: Default Domain Policy ... GPO: FIREWALL ...
    (microsoft.public.windows.server.active_directory)
  • Re: Main DC errors - please help.
    ... i have had an issue with the windows firewall ... i was disabling this in the default gpo to prevent it from ... i reset the default domain gpo and reconfigured the other settings and all ... seems ok with computer startup times on the workstations, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange 5.5 (latest SP and hotfixes) and Outlook 2k and 2003 Send/Receive Issue
    ... if XP firewall is disabled all is well. ... Yes, through GPO. ... > Can you try temporarily disabling the XP Firewall and see if that fixes ... >>> The problem is somewhere between the client and the server, ...
    (microsoft.public.exchange.admin)
  • Re: Changing firewall settings in Group Policy Editor
    ... Small Business Server Internet Connection Firewall ... Add a GPO with the required exceptions so the all PCs are affected. ... double-click Windows Firewall: ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy Delegation
    ... the GPO under the Domain container will only apply on ... "Small Business Server Windows Firewall" is enabled and linked to Domain ... 872769 You cannot configure Windows Firewall settings or Security Center ... the Delegation permission is not the function for controlling ...
    (microsoft.public.windows.server.sbs)
Quantcast