Re: Automatically turn firewall on and off ?



Matthew,

Assuming that your domain is running Windows 2003 or Windows 2008 Server, then you can use Group Policy to accomplish this result. Further assuming that you have familiarity with Group Policy, you will want to setup the policy for the Domain Profile and the Standard Profile (the latter being the off-network settings).

Of course, my personal opinion is that you should have the Windows firewall enabled whether or not you're on the network. Having a perimeter firewall (Cisco, SonicWall, etc) at your company does not negate the necessity for a host-based firewall as well. But perhaps there is some business reason for your decision of which I'm not aware.

In either case, here is a small article on domain vs. standard profiles for the firewall:
http://technet.microsoft.com/en-us/library/cc739685(WS.10).aspx

and another small one on configuring firewalls using Group Policy:
http://technet.microsoft.com/en-us/library/cc785865(WS.10).aspx

Good luck...

-Brad




_______________________________________________
Bradley J. Dinerman, MVP - Enterprise Security
President, National Information Security Group
http://www.naisg.org

Brad's TechTips: http://www.fieldbrook.net/techtips/


Matthew H wrote:
Hi there,

I was wondering is there a way I can have users PCs turn the firewall on or off depending if they are in the office or not?
We have Windows XP laptops in a Windows domain and we want the firewall off when in the office and off when they are anywhere outside the domain/office.

Is this possible with the build in Win XP firewall or will I need a third party product?
.



Relevant Pages

  • Re: How do I turn off SP2 firewal Group Policy setting
    ... I followed the instructions, but when I go to modify Group Policy, all ... settings are Not Configured Already. ... > Windows XP SP2 client computer in the SBS domain. ... > Firewall for client computers that are running Windows XP Professional. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 & Win2K DC
    ... 872769 You cannot configure Windows Firewall settings or Security Center ... | why a change I made to Group Policy (using gpupdate /force after the ...
    (microsoft.public.windows.server.sbs)
  • RE: Workstation Firewall / Group Policy
    ... configure the clients' firewall by SBS GPO to let network backup software ... you could try to edit the GPO '' Small Business Server Windows ... Firewall'' on SBS to configure the firewall on client. ... been truncated" error message when you edit or view Group Policy in Windows ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO does not disable XP Firewall
    ... I'm assuming your talking about the Windows Firewall/Internet Connection ... > network connections: Disabled ... > use of Firewall on Internet Domain: ... > Last time Group Policy was app ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2003 SP1 Firewall Control through Group Policy
    ... in group policy of applying a GPO to a selected set of targets. ... Is there a way to turn on the firewall on some machines and not others? ... JSI Tip 8378. ... Windows XP SP2 Firewall Update for Windows Small Business ...
    (microsoft.public.windows.server.active_directory)

Quantcast