Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 620
  • Last Modified:

xp firewall sbs 2003 group policy

I disabled the firewall in group policy for a computer (created an OU and created new GP for it) and Was able to set the firewall to disabled.  Can I allow the user to manage the Firewall at the client side,  In essence I need to disable other things in the advanced tab of the firewall and still dont have access
0
bumppbr
Asked:
bumppbr
1 Solution
 
NJComputerNetworksCommented:
Set the firewall gpo to "not configured"   This way the firewall settings won't be managed by the GPO.  Once this is done, you will have access to modify the firewall on any client...from the client.
0
 
bumppbrAuthor Commented:
Is this true for SBS 2003 because that is the way that I have it set right now and the clients do not have access.
I read something about a patch from microsoft to fix this so I downloaded and installed but it is still the same
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
First of all creating new USER OU's on an SBS will cause a number of problems due to the way SBS is designed.  

If you want to create different security settings for different groups of users then you need to create your new OU under MyBusiness\SecurityGroups and then create a Security Group within that OU.  

Then, create a new USER template which includes this SG by copying the default User Template and adding the SG.

Finally use the Change User Permissions wizard to apply this new template to any user(s) you like which will make them members of the SG.

The reason for doing it this way is that when you add a new user in the future you can just use that new template and you don't have to do any manual adding to groups.

Then... there are TWO Firewall GPO's on SBS.  One is Pre-XPSP2 and the other is Post-XPSP2.  If you don't want these to apply to the specific OU you have created then you would need to block inheritence from all GPOs and then re-link all of the other GPOs to this OU.

If you need further information about this please let me know.

Jeff
TechSoEasy
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now