Define Port Exceptions via GPs

[jshepherd]

I’m trying to configure my Windows 2K AD server to manage Windows XP SP2 Firewall ports via GPs but I’m not having much luck. I’ve copied the system.adm file from a Windows XP SP2 computer and successfully installed it on my Windows 2000 server and it seems to partially work but not fully. The primary GP needed is the ‘Windows Firewall: Define Port Exceptions’ and this is missing. Has anyone got any ideas?

Thanks, John

 

[ncotton]

when you say "manage your windows xp firewall ports"...do you mean just disable/force enable the firewall?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[jshepherd]

I need to open various ports via GPs, but to do this I need the 'Windows Firewall: Define Port Exceptions’ which doesn't show up in the GP list. It shows up on the local GP list when viewed on a XP Pro workstation or on a Windows 2003 Server but not when I’ve imported the system.adm file into my Windows AD 2K Server. If ever there was a reason to upgrade to 2K3 but I'm waiting for Vista Server.

 

[porkchopexpress]

If you install the management tools on an XP SP2 box then you should be able to manage the features when connecting to the 2k server. The 2k adm's should also be updated automatically if i remember correctly.

 

[jshepherd]

Thanks guys. Installing the mgmt tools onto an XP SP2 station did the trick but I don't know why my two AD servers still can't show the 'Windows Firewall: Define Port Exceptions’ - it's a bit crap really! What would happen if the XP SP2 station with mgmt tools disappeared? I assume it wouldn't make any difference and any additional XP SP2 station with mgmt tools would be able to edit the GP anyway. The adm files haven’t been updated on the W2K servers from the XP SP2 station automatically. I wonder if the MMC on the W2K servers needs updating but I can’t find any updates - I'm on SP4 anyway. I think I’ll go back to my ZX81!

 

[porkchopexpress]

You might find an answer here.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx