Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 259
  • Last Modified:

Active directory is pushing Group policy but I don't see it.

I just set my lient up on SBS 2003 and it seems to be enforcing GP but I did not set it to do so. The one thing I notice is it will not let anyone, not even domain admin turn off windows firewall on a users PC. It says right at the top of the firewall screen that for security reason some items may be controled by GP. It is grey out and stuck on.


Help
0
tkthelpdesk
Asked:
tkthelpdesk
1 Solution
 
troyhmcseCommented:
You need to run RSOP.MSC (Resultant set of Policies) on an affected desktop. This utility will give you read access to all the group policies that are effecting the desktop PC. Drill down the tree and inspect all the poilies. Once you locate the intrested area you can go into Active directorey launch the relevant group policy editor and make the change.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There are a number of default configuration settings with SBS, and some of those are the default Group Policy Objects.  

Open your Server Management Console > Advanced Management > Group Policy Management > Forest: YourDomain.local > Domains > YourDomain.local > Group Policy Objects

Here you will see the 10 or so default GPOs which are currently enabled on your server.  DO NOT delete any of these.  If you choose to not use one, just disable it instead.  It's much easier to turn back on when you find that it was probably a good thing to begin with.

More SBS knowledge for IT PRO's is here:  http://sbsurl.com/itpro

Jeff
TechSoEasy
0
 
tkthelpdeskAuthor Commented:
This is the 4the SBS server I have built and they all have the firewall blocked for the end user? kind of odd.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Why is this odd?  The concept of SBS is centralized management.  Why should you allow a user to turn off the firewall and compromise the security of your entire network?

Jeff
TechSoEasy
0
 
tkthelpdeskAuthor Commented:
It is odd that it does not tell me where I have the option to make that desicion for myself.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There are about 10 default GPO's on a Small Business Server.  You have the option to disable most any of those if you like.  

Jeff
TechSoEasy
0
 
ZadkinCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
    Accept: TechSoEasy {http:#16254563}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Zadkin
EE Cleanup Volunteer
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now