How to allow clients to control their own firewall in SBS 2011

AID: 7252
  • Status: Published

1920 points

  • Bylouisreeves
  • TypeTutorial
  • Posted on2011-08-25 at 05:49:32
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy.

In 2011, the client firewall policy has moved to the SBS computers container. If the computer is not in this AD container then the policy won’t work of course. The SBS 2008 policy in in the group policy objects folder, under SBS client policies.

When you Google this “turning off the client firewall policy in sbs 2011” you get this:

http://msmvps.com/blogs/robwill/archive/2011/04/06/disable-the-windows-firewall-on-client-computers-in-an-sbs-2008-domain.aspx

This article will lead you nowhere (it is for 2008 and not 2011) and that can be frustrating.

So… Here is the location if you have the need in SBS 2011 :
 
gpooffSBSclient.JPG
  • 31 KB
  • SBS 2011 sbscomputers policy
SBS 2011 sbscomputers policy


The policy computer configuration-> windows settings->administrative templates->network->network connections->windows firewall->Domain Profile->make sure all the settings are changed to not configured. This will ensure the Clients have control of their own firewall.

 
sbs2011domainprofile.JPG
  • 72 KB
  • SBS 2011 windows firewall policy
SBS 2011 windows firewall policy


Once they are all configured you can do your gpupdate/force and have the clients log off and back on again and viola.

Disclaimer :

I would not implement this in the organization unless you have a specific reason.

I wrote this article because there is currently not one out on the internet for how to do this in SBS 2011. One caveat is the public firewall setting on the server. If you do these GPS settings and then turn on the "public" firewall policy on the server, I think this will reset the settinngs. I havent verified this but at least you have an idea as to what is going on.

The Firewall policy for the server is in server manager-> configuration->windows firewall with advanced settings. Then you right click and go to properties. Or simply use the SBS console. Either way - you want to make sure your Server firewall settings are how you want them and then go ahead and make the change.

I hope this helps.

L
    Asked On
    2011-08-25 at 05:49:32ID7252
    Tags

    sbs 2011 client firwall gpo policy

    Topic

    SBS Small Business Server

    Views
    1233

    Comments

    Add your Comment

    Please Sign up or Log in to comment on this article.

    Join Experts Exchange Today

    Gain Access to all our Tech Resources

    Get personalized answers

    Ask unlimited questions

    Access Proven Solutions

    Search 3.2 million solutions

    Read In-Depth How-To Guides

    1000+ articles, demos, & tips

    Watch Step by Step Tutorials

    Learn direct from top tech pros

    And Much More!

    Your complete tech resource

    See Plans and Pricing

    30-day free trial. Register in 60 seconds.

    Loading Advertisement...

    Top SBS Small Business Server Experts

    1. alanhardisty

      288,944

      Guru

      4,000 points yesterday

      Profile
      Rank: Genius
    2. RobWill

      244,000

      Guru

      0 points yesterday

      Profile
      Rank: Savant
    3. cgaliher

      212,096

      Guru

      0 points yesterday

      Profile
      Rank: Genius
    4. demazter

      210,230

      Guru

      0 points yesterday

      Profile
      Rank: Genius
    5. CrisHanna_MVP

      156,731

      Guru

      0 points yesterday

      Profile
      Rank: Genius
    6. fl_flyfishing

      92,640

      Master

      0 points yesterday

      Profile
      Rank: Wizard
    7. leew

      73,020

      Master

      0 points yesterday

      Profile
      Rank: Savant
    8. WORKS2011

      67,191

      Master

      600 points yesterday

      Profile
      Rank: Guru
    9. MPECSInc

      58,168

      Master

      0 points yesterday

      Profile
      Rank: Genius
    10. TechSoEasy

      49,683

      1,400 points yesterday

      Profile
      Rank: Genius
    11. hanccocka

      45,472

      0 points yesterday

      Profile
      Rank: Genius
    12. absi81

      41,570

      2,000 points yesterday

      Profile
      Rank: Master
    13. acbrown2010

      35,400

      0 points yesterday

      Profile
      Rank: Genius
    14. jaredr80

      33,414

      0 points yesterday

      Profile
      Rank: Master
    15. olafdc

      32,208

      0 points yesterday

      Profile
      Rank: Sage
    16. chakko

      28,482

      0 points yesterday

      Profile
      Rank: Genius
    17. arnold

      28,300

      0 points yesterday

      Profile
      Rank: Genius
    18. aoakeley

      27,964

      2,000 points yesterday

      Profile
      Rank: Sage
    19. Anuroopsundd

      27,952

      0 points yesterday

      Profile
      Rank: Sage
    20. Geodash

      27,262

      0 points yesterday

      Profile
      Rank: Guru
    21. apache09

      26,423

      0 points yesterday

      Profile
      Rank: Genius
    22. dariusg

      25,186

      0 points yesterday

      Profile
      Rank: Genius
    23. noxcho

      24,577

      0 points yesterday

      Profile
      Rank: Genius
    24. marcustech

      23,701

      2,000 points yesterday

      Profile
      Rank: Guru
    25. KCTS

      22,664

      0 points yesterday

      Profile
      Rank: Genius

    Hall Of Fame