Re: XP firewall turn off GP



Well the user needs to be a local administrator which in most cases is not
desirable as they can then do things like create a user account to logon to
and bypass Group Policy user configuration, disable applications, install
kazaa, etc. But to answer your question go to the controlling Group Policy
for "computer configuration"/administrative templates/network/network
connections/Windows firewall and set prohibit use of Internet Connection
Firewall to not configured or disabled. There are other settings you can
review in the domain and standard profile depending on what you want to
manage and be sure to read the full explanation of each settings. If you are
not sure of the controlling Group Policy run rsop.msc on one of the
computers and you should see the settings applied I mentioned and it will
show what Group Policy is applying the setting. I would suggest however that
you manage the Windows Firewall to have the most security advantage for your
domain which you should be able to do with all the various settings in
domain and standard profile. I would feel very uncomfortable letting users
disable the Windows Firewall but that is your call. --- Steve



"Clayton" <Clayton@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:37205AA7-7D23-4F33-98EF-F91EC3856539@xxxxxxxxxxxxxxxx
I have a new SBS 2003 server. Apparenly there is a group policy that does
not
allow my XP users to turn off their firewall. I have screwed around with
gpedit but can't seem to figure it out. Can someone please tell me how to
set
it up so the user can turn it off as well as on?



.



Relevant Pages

  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPInventory
    ... The settings look fine but possibly your Group Policy settings are not ... settings for the computer configuration, ... Windows Firewall: ...
    (microsoft.public.windowsxp.security_admin)
  • RE: group policy
    ... "Windows Firewall" settings should work properly in Group Policy. ... The domain profile settings that are used by the computers when they are ...
    (microsoft.public.windows.server.sbs)
  • RE: Is Symantec Antivirus 10.1 a usable product?
    ... provide exceptions for 3 or 4 programs. ... Click on the "Application Settings" tab. ... Windows Firewall Group Policy Settings: ...
    (microsoft.public.windows.server.sbs)
  • Re: XP machine removed from domain still gets domain policy
    ... then turn off the firewall. ... Prohibit use of the Internet Connection Firewall on your DNS domain network? ... Firewall settings), the Firewall settings revert back to the default and ... the only Group Policy being applied is the "Local Group Policy" ...
    (microsoft.public.windows.group_policy)