Group policy setting - SBS 2008 - Disable workstation firewall?

Hi,

Was there something wrong with my answer to warrant a 'B' grade?

I can't speak for the other user, but I have no idea what your statement below means.
Is the user supposed to go to regedit, GPO, Computer Manager?

There is no item called "Computer Configuration" on a 2008 SBS.

"Computer Configuration\Policies\Administrative Templates\Network\Network Connections\Windows Firewall\Domain Profile. Look for 'Windows Firewall: Protect all network connections' and disable it."

The setting referred to in this solution was a Group Policy. If you create a GPO or edit an existing one, you'll find a Computer Configuration container there.

-Matt

Hi, I know this is closed but I thought I'd clarify finding that policy a little as I had a bit of trouble finding it myself.
But actually it's pretty simple.

when you open Group policy management, you need to drill down as follows:


Forest\domains\yourdomain.com\
Then right click on "Default doimain policy" and select "Edit".

The edit will open up another window of "Group policy management editor" where you can see the "computer configuration" options...

I'm guessing there's a faster way to find that instead of what I did, but it works. :)

 

Thanks afurness that helped.

There are 3 GPO's that affect the firewall on client machines in and SBS 2008 domain.
Open the group policy management console on the SBS and edit each of the 3 following GPO's, or the ones that match the types of client PC's you have. They can be found under My Business | Computers | SBS Computers or  under Group Policy Objects:
   Windows SBS Client - Windows Vista Policy
   Windows SBS Client - Windows XP Policy
   Windows SBS Client

The item to edit is:
Computer Configuration | Policies | Administrative Templates | Network |  Network Connections | Windows Firewall | DOMAIN Profile | Protect All Network connections
By default this is set to enabled. Setting to disabled will turn it off, setting to not configured allows administrators to enable or disable the firewall on the PC.

Note this only affects computers while connected to your domain. If you want to affect them while outside of your domain (not recommended) you also need to edit:
Computer Configuration | Policies | Administrative Templates | Network |  Network Connections | Windows Firewall | STANDARD Profile | Protect All Network connections

There is another GPO:  Computer Configuration | Policies | Administrative Templates | Network |  Network Connections | Prohibit use of Internet Connection Firewall on your DNS domain network", which can override the above. The default is set to not configured, but if has been changed to enabled or disabled it will force enabling or disabling of the firewall and administrators have no control. This should be left as "not configured"

Remember it can take up to 90 minutes for the policy to be applied to the workstations. You can force this almost immediately by running at a command line, on the workstation:
gpupdate /force