Re: disabling/enabling firewall with unprivileged user accounts



You are right they need to be local administrators. I don't know of any easy
workaround for you but what I would look at is using Group Policy startup or
shutdown scripts which run in system context that you might be able to make
some use of. If the computers are shut down before classes change you could
try to have different Group Policy settings for what you need for the
various classes and then change the Group Policy before the new class and
run gpupdate on the domain controller and hopefully when the computers
startup again they will have the new Group Policy firewall settings or
possibly even try a logon script with gpupdate which offhand I can't
remember if that works for a regular user. You could have several Group
Policies configured for just the firewall settings and linked to the
container that the computers are in and enable only the one you want for the
new class. You can use rsop.msc on a XP Pro domain member to see the current
Group Policy settings for a user/computer and the GPO that is enforcing the
setting. --- Steve


"david carvalho" <davidcarvalho@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C4B82401-B716-4CA0-8E85-6BEDEA73362D@xxxxxxxxxxxxxxxx
Hi!
I have a 30 XP pro machine lab in a windows 2003 server domain.
For some classes it is necessary to change the workstation's firewall
settings, or even disable it completly, and then enable it for the
following
class. Please correct me if I'm wrong, but I can't see a way of doing this
on
the 2003 server through AD.
i was thinking about a script, but since they are unprivileged users, the
can't run it, right ?
Any help is welcome!
Thanks
Best regards.
David


.



Relevant Pages

  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... You manage what Group Policy applies to users by where the GPO is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... check the domain controller for Group Policy and apply the GPO that is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disabling/enabling firewall with unprivileged user accounts
    ... had nothing but the Windows Firewall settings you want name Class1FW, ... Then when the computers start up for the new class they should ... check the domain controller for Group Policy and apply the GPO that is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)