Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 638
  • Last Modified:

Override Group Policy on an Individual Server

I need to override the default domain group policy (specifically one policy that turns on Windows Firewall) on one server.  I tried placing the computer object in its own OU and defining a policy for that OU that turned off the firewall and checked "block policy inheritance" on the properties, but this didn't work.  Is this the correct method or is there another way to do this?  Thanks.
2 Solutions
Is the default domain policy set to "Enforced"?  If so, that will be enforced.

Does the default domain policy have settings defined already for the Windows firewall?

Which setting in GP did you set for the Windows firewall?  To disable the Windows firewall the settings is in:

Computer Configuration\Administrative Templates\Network\Network Connections\Windows Firewall
The policy setting defined at the OU will be applied after the policy defined at the domain level. You should define the OU policy and check block policy inheirtance and no overide. This will prevent policies above and below from overiding your settings.

 As thecleaner metioned above apply the correct settings.........

This is the only setting that needs to be set unless you want to fine tune the policy. But start with this one only to verify your policy is working properly.

Windows Firewall: Protect all network connections – set to disabled


Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now