asked on

Active directory is pushing Group policy but I don't see it.

I just set my lient up on SBS 2003 and it seems to be enforcing GP but I did not set it to do so. The one thing I notice is it will not let anyone, not even domain admin turn off windows firewall on a users PC. It says right at the top of the firewall screen that for security reason some items may be controled by GP. It is grey out and stuck on.

Help

troyhmcse

You need to run RSOP.MSC (Resultant set of Policies) on an affected desktop. This utility will give you read access to all the group policies that are effecting the desktop PC. Drill down the tree and inspect all the poilies. Once you locate the intrested area you can go into Active directorey launch the relevant group policy editor and make the change.

ASKER CERTIFIED SOLUTION

Jeffrey Kane - TechSoEasy

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

tkthelpdesk

ASKER

This is the 4the SBS server I have built and they all have the firewall blocked for the end user? kind of odd.

Jeffrey Kane - TechSoEasy

Why is this odd? The concept of SBS is centralized management. Why should you allow a user to turn off the firewall and compromise the security of your entire network?

Jeff
TechSoEasy

tkthelpdesk

ASKER

It is odd that it does not tell me where I have the option to make that desicion for myself.

Jeffrey Kane - TechSoEasy

There are about 10 default GPO's on a Small Business Server. You have the option to disable most any of those if you like.

Jeff
TechSoEasy

Zadkin

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
Accept: TechSoEasy {http:#16254563}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Zadkin
EE Cleanup Volunteer