RE: Turning XP firewall off

More information:


C:\>Netsh firewall show state

Firewall status:
-------------------------------------------------------------------
Profile = Domain
Operational mode = Disable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable
Group policy version = Windows Firewall
Remote admin mode = Disable


"Eric VH" wrote:

My Question is: Is the firewall turned off? Why am I getting the errors in
the security log?


I have created a group policy that turns off the windows XP firewall.
The policy is working – I have verified it both using the group policy
results and registry settings.
I have made the following changes to the group policy:

Prohibit use of Internet Connection Firewall on your DNS domain network
Enabled

Windows Firewall: Protect all network connections
Disabled

Windows Firewall: Protect all network connections
Enabled

When I run a: netsh firewall show state verbose=enable
<clip>
Local Area Connection 3 firewall settings:
-----------------------------------------------------------------
Operational mode = Enable
Version = IPv4
GUID = {01BC0070-58E6-4F13-80D9-FD590F38B2D1}
<clip>

In the event viewer:

The Windows Firewall has detected an application listening for incoming
traffic.

Name: -
Path: C:\WINDOWS\system32\svchost.exe
Process identifier: 212
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 68
Allowed: No
User notified: No

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Of course when I click the link in the event view I get:
We’re sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere


Thanks!


.

Relevant Pages

  • Re: XP machine removed from domain still gets domain policy
    ... then turn off the firewall. ... Prohibit use of the Internet Connection Firewall on your DNS domain network? ... Firewall settings), the Firewall settings revert back to the default and ... the only Group Policy being applied is the "Local Group Policy" ...
    (microsoft.public.windows.group_policy)
  • Re: Network Services/NT Authority
    ... OK that is what I though in that you did not change any Group Policy ... settings but instead were managing the Windows Firewall settings and no you ... logon which is normal as your computer really is on a network - the ... ICMP and then the option to reset all the firewall ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO does not disable XP Firewall
    ... I'm assuming your talking about the Windows Firewall/Internet Connection ... > network connections: Disabled ... > use of Firewall on Internet Domain: ... > Last time Group Policy was app ...
    (microsoft.public.windows.group_policy)
  • Re: File sharing
    ... Instead of creating exceptions for individual ports for FPS I suggest that you try Group Policy and configuring the exemption for file and print sharing and probably the remote administration exemption. ... If there are do domain level Group Policies being applied to these computers currently for Windows Firewall, which you could verify by running rsop.msc on the client computer, you could try using local Group Policy to see if it does what you want. ... So then I went back and put in a custom setting to accept connections on the local subnet plus connections from my subnet, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I need to REMOVE Group Policy, please.
    ... firewall program such as Windows OneCare, ... Symantec Internet Security will also check your mail ... Mark Heitbrink - MVP Windows Server - Group Policy ...
    (microsoft.public.windows.group_policy)
Loading