Override Group Policy on an Individual Server

Posted on 2006-04-19
Last Modified: 2008-02-01
I need to override the default domain group policy (specifically one policy that turns on Windows Firewall) on one server.  I tried placing the computer object in its own OU and defining a policy for that OU that turned off the firewall and checked "block policy inheritance" on the properties, but this didn't work.  Is this the correct method or is there another way to do this?  Thanks.
Question by:kpiller
    LVL 23

    Accepted Solution

    Is the default domain policy set to "Enforced"?  If so, that will be enforced.

    Does the default domain policy have settings defined already for the Windows firewall?

    Which setting in GP did you set for the Windows firewall?  To disable the Windows firewall the settings is in:

    Computer Configuration\Administrative Templates\Network\Network Connections\Windows Firewall
    LVL 12

    Assisted Solution

    The policy setting defined at the OU will be applied after the policy defined at the domain level. You should define the OU policy and check block policy inheirtance and no overide. This will prevent policies above and below from overiding your settings.

     As thecleaner metioned above apply the correct settings.........

    This is the only setting that needs to be set unless you want to fine tune the policy. But start with this one only to verify your policy is working properly.

    Windows Firewall: Protect all network connections – set to disabled


    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now