Help with the Windows Firewall and Group Policy (Standard Profile)

Posted on 2007-10-03
Last Modified: 2008-01-09
I have a few users that have laptops (XP SP2) here at the office.  I am running Server 2003 and I am trying to setup a Group Policy that will disable the Windows firewall when the laptop is here in the office but enable the Windows firewall when they are off the domain.  

I have enabled the firewall under the Domain Profile in the GPOE and disabled the firewall under the Standard Profile.  When I test these settings, the laptop when connected to the domain has the firewall enabled.  Obviously, this is not what I want.  If I change the Group Policy under the Standard Profile to disable the firewall and reapply the GP, the laptop disables the firewall as it should.

Any thoughts on how I can achieve what I am looking for?  
Question by:csimmons1324
    LVL 9

    Expert Comment


    A possible alternative could be to use a logon / logoff script.

    When logging in, the login script is executed : netsh firewall set opmode enable.

    When the user logs out of the domain, the logoff script  is executed : netsh firewall set opmode disable.



    Accepted Solution

    I found the solution:

    Within the GPO Editor:

    - Computer Configuration
      - Network
        - Network Connections
          - Windows Firewall

    Disable "Windows Firewall: Protect all network connections" within the Domain Profile and the Standard Profile.

    Please refund the points and close this question.
    LVL 2

    Expert Comment

    Closed, 500 points refunded.
    Friendly Neighbourhood Community Support Moderator

    Expert Comment

    I'm having the same issue but I don't see how the solution is accomplishing the goal of ENABLING the firewall when its OFF the domain.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now