Re: Windows firewall spontaneously changes profiles

From: Carey Frisch [MVP] (cnfrisch_at_nospamgmail.com)
Date: 06/27/05 

Date: Mon, 27 Jun 2005 14:09:06 -0500

For issues related to firewalls:

Please visit the Windows Firewall newsgroup experts:
news://msnews.microsoft.com/microsoft.public.windows.networking.firewall 

-- 
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups
Get Windows XP Service Pack 2 with Advanced Security Technologies: 
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx
-------------------------------------------------------------------------------------------
"David Carlin" wrote:
| I'm having a problem where both XP SP2 and Server 2003 SP1 machines 
| spontaneously change firewall profiles every couple weeks.  The event 
| log entry is this:
| 
| Event Type:    Success Audit
| Event Source:    Security
| Event Category:    Policy Change
| Event ID:    860
| User:        NT AUTHORITY\SYSTEM
| Computer:    COMPUTERNAME
| Description:
| The Windows Firewall has switched the active policy profile.
| Active profile: Standard
| 
| The issue being, the standard profile is stock.  None of my exceptions 
| are listed and file sharing, network backups, antivirus updates, etc.. 
| are disrupted.
| 
| Why is windows switching profiles?  What criteria does it use to 
| suddenly decide not to use the domain profile?  I'd hate to think a 
| momentary network blip could cause something unpredictable like this.
| 
| Ideally, is there a way I can can have the domain profile always in use? 
|  Do I have to maintain both a Standard and Domain profile with 
| identical settings?
| 
| Thank You,
| 
|     -David Carlin

Relevant Pages

  • Re: Virus tranmission via Windows Automatic Updates?
    ... > (Can others confirm that that is the web address used by Automatic Updates?) ... applied the apparent rogue update that was delivered through the Windows ... going to be able to get to my domain profile if I put it back on the network. ...
    (microsoft.public.security.virus)
  • Re: How do you all manage employee workstations? Looking for sugge
    ... When enabled roaming profiles, users have same profiles ... been authenticated within the directory service, the user profile, ... You can use group policy to assign software to all workstations. ... How to use Group Policy to remotely install software in Windows Server 2003 ...
    (microsoft.public.windows.server.sbs)
  • RPC Connection problems with XP Firewall, dispite proper exeptions
    ... So there seems to be a problem with DCOM or RPC over the Windows XP SP2 ... Windows Firewall: Allow local program exceptions ... If you enable this policy setting, Windows Firewall allows the computer to ... does not open TCP port 135 or 445. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Still cant connect to RWW or OWA remotely
    ... Advanced tab on both NICs. ... "Windows Firewall cannot run because another ... Windows WORKSTATION XP Pro - Domain Member ... Meridian.local Ethernet adapter Local Area Connection: ...
    (microsoft.public.windows.server.sbs)
  • Missing applications after XP clean install/reinstall - Help!!
    ... Here's my problem in a nutshell: I've reinstalled Windows XP SP2 clean. ... I've managed to get my main user profile back so I have all of my documents, ... I have the install disks for a lot of my major applications - Microsoft ... 40GB partition. ...
    (microsoft.public.windowsxp.setup_deployment)