Link to home
Start Free TrialLog in
Avatar of AManoux
AManoux

asked on

Disable 1394 "firewire" connection via GPO

Is there a way to disable the 1394 connection on domain computers using an Active Directory Group Policy?
ASKER CERTIFIED SOLUTION
Avatar of coolsport00
coolsport00
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AManoux
AManoux

ASKER

Thanks, although I'm a little weary of using recommendations from a post from 2005 that states they got the info from the web a few years before that.   Also the post is mostly for USB devices and does not clearly state how to do it for Firewire connections.
SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I am just curious on why this would need to be done?  Is that connection really a threat?  Is this a DOD network?
Avatar of AManoux

ASKER

I have a large number of laptop users that plug in and out of various networking devices.  The 1394 connection becomes enabled when Windows XP thinks it needs to automatically create a network bridge.  For some reason when this connection becomes enabled it interferes with the Symantec AV communication between client and parent server.  Don't ask me why.  If I could disabled the connections via GPO I wouldn't have to worry about it any longer.
The only way other than using a 3rd party solution (or manipulating the registry a bit) is by using GPP as I and Mike suggest. Make sure you test though...Endpoing Security is more than it seems to be, I'm finding out (using GFI EndPoint Security software).

Regards.
~coolsport00
Avatar of AManoux

ASKER

Thanks for everyone's input. Just trying to find time to test out suggestions.  Will post an update soon.
I found when a 1394 adapter was added to a XP workstation in a domain, it affected the Microsoft "File and printer sharing" property for the PC's NIC. It didn't disable the file and printer sharing but it blocked remote access to the workstation from the domain admin; the workstation could not be managed.
Also, having the 1394 adapter enabled "shaded" the "File and printer sharing" property for the primary network interface card. Once I disabled the 1394 adapter the "File and printer sharing" property displayed the same as the other properties.