Re: Group Policy prevents me from turning on my Firewall

Phew!
The Firewall is on.
I was recovering from a double whacking:
first the Vulmundo malaware which I finally got rid of thanks to some good
people on the appropriate IE 6.0 message board.
next the Windows One something or the other Beta
Once I uninstalled this and rebooted, my firewall came on normally.
No more Beta for me even from MSFT.
Any more malaware and I'm switching to Lynx.
Should have had a dual boot on my computer anyways...
And I'm getting used to Firefox.

Am going to sleep peacefully tonight.
First time in a week and a half.

Thanks Steven. You were right.
--
Nick


"Steven L Umbach" wrote:

FYI that could be indication that your computer is infected with malware and
you should be scanning your computer for viruses and spyware using the
latest definition files for any program you use. I say that because malware
can change a registry key to try to prevent you from starting the firewall
so that it can do it's thing such as turn your computer into a file server
for internet users. Login as a local administrator and use regedit to see if
the following registry keys exist on your computer and if they do delete
them by right clicking the key and selecting delete and then exit and reboot
your computer. The links below may help you in cleaning and securing your
computer. Note that virus detection and removal programs do not usually
undo registry configuration changes done by malware. --- Steve

The registry keys to add to disable Windows Firewall for both the domain and
standard profiles are the following:

. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
\DomainProfile \EnableFirewall=0 (DWORD data type)

. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
\StandardProfile \EnableFirewall=0 (DWORD data type)



http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
-- Protect Your PC tips
http://www.microsoft.com/athome/security/viruses/default.mspx --- viruses
and worms
http://www.microsoft.com/athome/security/spyware/default.mspx --- spyware
http://housecall.trendmicro.com/ --- Trend Micro online scan

"Nick" <Nick@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0733512D-514C-4E4C-9B03-9661025498E8@xxxxxxxxxxxxxxxx
What do I do to change this Gr. Policy?
I have no Gr. Policy icon on my Win XP SP2 modem connected Home computer.
This used to work right by default with the Firewall icon on the bottom
right of my task bar.
So How did it happen?
When I tried to install Win Defender Beta 1, (the latest version), it said
it was uninstalling the previous version.
It did and now I have this problem.

Help!
Thanks.
Nick
--
Nick



.

Relevant Pages

  • Re: XP File and printer sharing SOLVED!! A HIDDEN FIREWALL!!
    ... I decided that it /had/ to be a firewall problem. ... So I went into the Registry looking for keys with Symantec files that were ... I then deleted the Registry keys, rebooted, and deleted the files ... Steve Winograd, MS-MVP (Windows Networking) ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cannot see computer on network SOLVED!! A HIDDEN FIREWALL!
    ... Remember that LSP / Winsock problems are destructive in nature (You can ... After going through everything in all the various posts, links, etc., multiple times, I decided that it /had/ to be a firewall problem. ... I noticed that when I used the Live Update feature in Symantec's Norton Ghost it was still trying to update--unsuccessfully--some sort of security software. ... I then deleted the Registry keys, rebooted, and deleted the files. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Attempted Intrusion "Welchia_ICMP_Scan" from your machine against
    ... I did download and run Spybot 1.2 and found a DSO Exploit ... Data source object exploit (Registry change, ... I don't know if these registry keys and/or values are causing the problem. ...
    (microsoft.public.security.virus)
  • Re: XP firewall is grayed out
    ... It sounds like your computer has somehow had the same registry keys added to ... it that would be used by Group Policy, possibly by malware, to prevent you ... Firewall and prompt you to delete them. ...
    (microsoft.public.windowsxp.security_admin)
  • MSs beta of Windows Onecare
    ... Anyone else testing MS's beta of Windows Onecare? ... It includes a firewall, anti-virus app, backup & restore feature, scheduled ... installation. ...
    (microsoft.public.windowsxp.newusers)