Active directory is pushing Group policy but I don't see it.

I just set my lient up on SBS 2003 and it seems to be enforcing GP but I did not set it to do so. The one thing I notice is it will not let anyone, not even domain admin turn off windows firewall on a users PC. It says right at the top of the firewall screen that for security reason some items may be controled by GP. It is grey out and stuck on.


Help
tkthelpdeskAsked:
Who is Participating?
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There are a number of default configuration settings with SBS, and some of those are the default Group Policy Objects.  

Open your Server Management Console > Advanced Management > Group Policy Management > Forest: YourDomain.local > Domains > YourDomain.local > Group Policy Objects

Here you will see the 10 or so default GPOs which are currently enabled on your server.  DO NOT delete any of these.  If you choose to not use one, just disable it instead.  It's much easier to turn back on when you find that it was probably a good thing to begin with.

More SBS knowledge for IT PRO's is here:  http://sbsurl.com/itpro

Jeff
TechSoEasy
0
 
troyhmcseCommented:
You need to run RSOP.MSC (Resultant set of Policies) on an affected desktop. This utility will give you read access to all the group policies that are effecting the desktop PC. Drill down the tree and inspect all the poilies. Once you locate the intrested area you can go into Active directorey launch the relevant group policy editor and make the change.
0
 
tkthelpdeskAuthor Commented:
This is the 4the SBS server I have built and they all have the firewall blocked for the end user? kind of odd.
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Why is this odd?  The concept of SBS is centralized management.  Why should you allow a user to turn off the firewall and compromise the security of your entire network?

Jeff
TechSoEasy
0
 
tkthelpdeskAuthor Commented:
It is odd that it does not tell me where I have the option to make that desicion for myself.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There are about 10 default GPO's on a Small Business Server.  You have the option to disable most any of those if you like.  

Jeff
TechSoEasy
0
 
ZadkinCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
    Accept: TechSoEasy {http:#16254563}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Zadkin
EE Cleanup Volunteer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.