xp firewall sbs 2003 group policy

Posted on 2006-05-12
Last Modified: 2007-11-27
I disabled the firewall in group policy for a computer (created an OU and created new GP for it) and Was able to set the firewall to disabled.  Can I allow the user to manage the Firewall at the client side,  In essence I need to disable other things in the advanced tab of the firewall and still dont have access
Question by:bumppbr
    LVL 33

    Expert Comment

    Set the firewall gpo to "not configured"   This way the firewall settings won't be managed by the GPO.  Once this is done, you will have access to modify the firewall on any client...from the client.
    LVL 1

    Author Comment

    Is this true for SBS 2003 because that is the way that I have it set right now and the clients do not have access.
    I read something about a patch from microsoft to fix this so I downloaded and installed but it is still the same
    LVL 74

    Accepted Solution

    First of all creating new USER OU's on an SBS will cause a number of problems due to the way SBS is designed.  

    If you want to create different security settings for different groups of users then you need to create your new OU under MyBusiness\SecurityGroups and then create a Security Group within that OU.  

    Then, create a new USER template which includes this SG by copying the default User Template and adding the SG.

    Finally use the Change User Permissions wizard to apply this new template to any user(s) you like which will make them members of the SG.

    The reason for doing it this way is that when you add a new user in the future you can just use that new template and you don't have to do any manual adding to groups.

    Then... there are TWO Firewall GPO's on SBS.  One is Pre-XPSP2 and the other is Post-XPSP2.  If you don't want these to apply to the specific OU you have created then you would need to block inheritence from all GPOs and then re-link all of the other GPOs to this OU.

    If you need further information about this please let me know.


    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now