Re: XP firewall turn off GP

Also take a look at the setting in the domain and standard profile for
"protect all network connections" an make sure that is set to not
configured. Just checking in local Group Policy is not good enough as you
need to run rsop.msc to see if that setting is enabled or disabled via some
Group Policy and again be sure to read the full description of the Group
Policy settings. I am assuming here your XP computers are running Service
Pack 2. You should be able to run rsop.msc in the run box on the remote
computer if you can access via Remote Desktop or via the domain controller
via the mmc snapin for Resultant Set of Policy if you are accessing the
domain controller remotely ideally in logging mode but even planning mode
can help determine which Group Policy is applying a setting. --- Steve



"Clayton" <Clayton@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7BB01B5C-94AB-499A-8B68-8EBB0E576C51@xxxxxxxxxxxxxxxx
Okay,
I checked the GP setting it it says "Not Configured"
any other ideas?
I am doing this remotely so I can't run the rsop yet.


"Steven L Umbach" wrote:

Well the user needs to be a local administrator which in most cases is
not
desirable as they can then do things like create a user account to logon
to
and bypass Group Policy user configuration, disable applications, install
kazaa, etc. But to answer your question go to the controlling Group
Policy
for "computer configuration"/administrative templates/network/network
connections/Windows firewall and set prohibit use of Internet Connection
Firewall to not configured or disabled. There are other settings you can
review in the domain and standard profile depending on what you want to
manage and be sure to read the full explanation of each settings. If you
are
not sure of the controlling Group Policy run rsop.msc on one of the
computers and you should see the settings applied I mentioned and it will
show what Group Policy is applying the setting. I would suggest however
that
you manage the Windows Firewall to have the most security advantage for
your
domain which you should be able to do with all the various settings in
domain and standard profile. I would feel very uncomfortable letting
users
disable the Windows Firewall but that is your call. --- Steve



"Clayton" <Clayton@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:37205AA7-7D23-4F33-98EF-F91EC3856539@xxxxxxxxxxxxxxxx
I have a new SBS 2003 server. Apparenly there is a group policy that
does
not
allow my XP users to turn off their firewall. I have screwed around
with
gpedit but can't seem to figure it out. Can someone please tell me how
to
set
it up so the user can turn it off as well as on?






.

Relevant Pages

  • Re: Client End Firewalls
    ... depending on the firewall's configuration). ... Even if a client side firewall was to block just one ... Using a firewall with password protection is a must. ... >> connections. ...
    (Security-Basics)
  • Re: GPO does not disable XP Firewall
    ... I'm assuming your talking about the Windows Firewall/Internet Connection ... > network connections: Disabled ... > use of Firewall on Internet Domain: ... > Last time Group Policy was app ...
    (microsoft.public.windows.group_policy)
  • Re: File sharing
    ... Instead of creating exceptions for individual ports for FPS I suggest that you try Group Policy and configuring the exemption for file and print sharing and probably the remote administration exemption. ... If there are do domain level Group Policies being applied to these computers currently for Windows Firewall, which you could verify by running rsop.msc on the client computer, you could try using local Group Policy to see if it does what you want. ... So then I went back and put in a custom setting to accept connections on the local subnet plus connections from my subnet, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Re: Questions About Windows Firewall and Domain Policy Enfor
    ... > configure the firewall, namely group policy, net shell ... > configuration and through an application using the relevant ... > Standard to be the ...
    (microsoft.public.win2000.group_policy)
Loading