Windows update turning firewall services on...
Hello
I am having a problem with recent automatic windows updates turning on the windows firewall services on all the computers. The GP was set before all this happened to turn windows firewall off.
For some reason with in the last 2 weeks one of the automatic updates required a system restart and after the restart it turns the firewall service on. If you go to the firewall in control panel it shows the firewall being off but if you check the service it is on and changed from "disabled" to "automatic". The only way I have found to turn this off is the manually go to each pc and change the service from "automatic" to "disable".
My real question is why won't the group policy update after the user has restarted the computer? It won't even change back using "gpupdate".
I am having a problem with recent automatic windows updates turning on the windows firewall services on all the computers. The GP was set before all this happened to turn windows firewall off.
For some reason with in the last 2 weeks one of the automatic updates required a system restart and after the restart it turns the firewall service on. If you go to the firewall in control panel it shows the firewall being off but if you check the service it is on and changed from "disabled" to "automatic". The only way I have found to turn this off is the manually go to each pc and change the service from "automatic" to "disable".
My real question is why won't the group policy update after the user has restarted the computer? It won't even change back using "gpupdate".
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
To find out which policy is winning, us the group policy management console and run a Group Policy Results query against a machine/user combination for which the group policy is not shutting off the firewall.
Once you know which policy is winning, then you can go back and change the order the policies are applied, or modify the winning policy to shut off the firewall, etc.
Once you know which policy is winning, then you can go back and change the order the policies are applied, or modify the winning policy to shut off the firewall, etc.
ASKER
For some reason I was thinking that the default domain policy was set to "Enforced" by default. I went to the group policy editor and noticed it wasn't set to "yes".
I have already changed all the services back to "disabled" but I'm sure this would have fixed the problem.
I have already changed all the services back to "disabled" but I'm sure this would have fixed the problem.
ASKER
I went ahead and manually changed all the services to "disabled" through Computer Management console.