GPO Question

[JeffITman]

I'm running SBS Premium 03. I need to have the ability to change the firewall status on the local machine. I've looked through every GPO on our server, but have not been able to change a rule that allows me to turn the firewall on or off at the machine. Is there a special rule somewhere else that I'm missing?? I've even created a rule that is only set to disable the firewall, but that didn't seem to work either.

Thanks in advance for any help given.

 

[58sniper]

You want a GPO that turns off the firewall on the workstations or on the server itself?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[schtek]

check ure service pack is up to date!! look under admin /networking i believe its there!!!

Stand up wherever you are, go to the nearest window and yell as loud as you can, 'I'm mad as hell, and I'm not going to take it anymore.'

http://www.schtek.co.uk

 

[Spirit]

This is for computers only (can't be done by user.... I think) but you want to look;
Computer Configuration - Administrative Templates - Network - Network Connections - Windows Firewall.

This is the setting for Windows XP Sp 2 the full MS KB article is;

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngwfw.mspx

Iain

 

[schtek]

hats the baby well done spirit

Stand up wherever you are, go to the nearest window and yell as loud as you can, 'I'm mad as hell, and I'm not going to take it anymore.'

http://www.schtek.co.uk

 

[JeffITman]

I need a GPO that turns the firewall off on the workstation. I've disabled ALL the GPO's and that still didn't change the setting on the workstation.

 

[sharper]

As Spirit says change this setting:
Computer Configuration - Administrative Templates - Network - Network Connections - Windows Firewall -Domain Profile - Windows Firewall: Protect all network connections - Disabled.

Now this GPO needs to be linked to an Organistational Unit that contains workstations not users.

s.

 

[monsterjta]

Have you tried refreshing the policies on the local machine?

gpupdate /force

You may need to reboot for some machine policies to be applied.