• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 192
  • Last Modified:

Turn off Windows Firewall

Hi All

I'm a domain admin in our organisation and local admin on my laptop.
While the laptop is connected at work, there are no issues connecting to other computers, etc.

However, when at home - none of my PCs can access the laptop (ICMP is compltely disabled) and all the options are greyed out - managed by Group Policy.

My collegues are stuck on this one, as am I. I've tried the netsh firewall set opmode disable command without success (output is 'Ok.').

I've had a look in gpedit.msc and can't see anything.

I have the permissions to be able to change the firewall settings for when I'm not in the office - I just lack the methods. OS is Win XP Pro SP2 with most updates (managed by WSUS).

The firewall blocks all 3 of my network adapters, the onboard one that I use for work (DHCP), a PCMCIA card that I use for home (static address), and WiFi (home, work, everwhere else).

Any ideas?
  • 2
  • 2
1 Solution
There are two firewall policies in group policy:
* Standard profile
* Domain profile

The standard policy is used by computers in a workgroup environment and when a domain-connected PC is not connected to the domain (such as using a domain-connected machine at home).  By default this will reject all unsolicited inbound traffic.

The domain policy is used by domain-connected computers when they are connected to the domain (they can see a DC).  

It seems that you need to look at the standard policy settings affecting your laptop.
Ryan_RIT Systems AdministratorAuthor Commented:
I've had another look - do you have any suggestions on what to change?
Can you logon as a local administrator, and change the Windows Firewall/Internet Connection Sharing (ICS) service's startup type to Disabled?
Or is this locked down as well?
Ryan_RIT Systems AdministratorAuthor Commented:
How about that - that worked beautifully. Thanks a lot.
No problem - Thank you.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now