Turn off Windows Firewall

Hi All

I'm a domain admin in our organisation and local admin on my laptop.
While the laptop is connected at work, there are no issues connecting to other computers, etc.

However, when at home - none of my PCs can access the laptop (ICMP is compltely disabled) and all the options are greyed out - managed by Group Policy.

My collegues are stuck on this one, as am I. I've tried the netsh firewall set opmode disable command without success (output is 'Ok.').


I've had a look in gpedit.msc and can't see anything.

I have the permissions to be able to change the firewall settings for when I'm not in the office - I just lack the methods. OS is Win XP Pro SP2 with most updates (managed by WSUS).

The firewall blocks all 3 of my network adapters, the onboard one that I use for work (DHCP), a PCMCIA card that I use for home (static address), and WiFi (home, work, everwhere else).

Any ideas?
LVL 15
Ryan_RIT Systems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lamaslanyCommented:
There are two firewall policies in group policy:
* Standard profile
* Domain profile

The standard policy is used by computers in a workgroup environment and when a domain-connected PC is not connected to the domain (such as using a domain-connected machine at home).  By default this will reject all unsolicited inbound traffic.

The domain policy is used by domain-connected computers when they are connected to the domain (they can see a DC).  

It seems that you need to look at the standard policy settings affecting your laptop.
0
Ryan_RIT Systems AdministratorAuthor Commented:
I've had another look - do you have any suggestions on what to change?
0
and235100Commented:
Can you logon as a local administrator, and change the Windows Firewall/Internet Connection Sharing (ICS) service's startup type to Disabled?
Or is this locked down as well?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ryan_RIT Systems AdministratorAuthor Commented:
How about that - that worked beautifully. Thanks a lot.
0
and235100Commented:
No problem - Thank you.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.