Internet Connection Firewall on Windows 2003?

[Zoplax]

Hello, I have a Windows 2003 Server running Active Directory.

When I try enabling the basic Internet Connection Firewall, it's as if the server becomes invisible to the workstations on the LAN, they cannot log in and can't process group policy.

How can I specify to the firewall what subnets are allowed to access the server (in other words, how do I define the subnet that the server and all the workstations are on, and allow unrestricted traffic between those computers)?

 

[mlichstein]

I don't think you can do this with the 2003 RTM version of ICF. Software firewalls on domain controllers are generally not a good idea. A better idea is a hardware firewall protecting the internal network the DC is on.