Link to home
Start Free TrialLog in
Avatar of gavin_d
gavin_dFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Windows Firewall Disabled at Start up

Laptop XP-Pro Sp3 fully patched. Everytime I reboot the windows firewall is disabled and has to be enabled manually. Checked services and it is set as on. Is there a quick way to ensure that it stays on by default.
ASKER CERTIFIED SOLUTION
Avatar of Bryon H
Bryon H
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ccspro1
ccspro1

If your laptop is joined to a domain then it is most likely due to a group policy that is set to disable the windows firewall. Check your group policy objects on your domain controller and disable or modify the offending group policy.

Also, you can modify the local security policy on the laptop itself which will override the group policy by typing gpedit.msc at the run command and enabling the windows firewall setting.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This can be in indication of a backdoor trojan (eg ZBot).  Run an updated version of something like MalwareBytes AntiMalware just to be safe.
Avatar of gavin_d

ASKER

Laptop is not domain member, though was in a previous incarnation, now part of a basic "home" workgroup. The issue with the Firewall is something that has only occurred in the last month. Done "deep Scan" scan with various anti-virus and root "detection / malware" tools and nothing has shown up. Firewall is set to start automatically on start up, and have set it to start on first fail.
Ivanoviola...still looking at the advise form this site. Event Viewer info.....I am not working on that laptop at the moment to double check, but don't recall anything in the logs standing out. Still checking...
would it be acceptible to make a batch file like this?
example:  c:\startthefirewall.bat
---------------cut between the lines----------
@echo off
sc config sharedaccess start= auto
sc start sharedaccess
---------------cut between the lines----------

then right click the new batch file, copy
go to c:\docume~1\alluse~1\startm~1\programs\startup
right-click, paste-shortcut
then right click the shortcut, properties, run minimized

what that does is sets the windows firewall service back to automatic, and starts it
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of gavin_d

ASKER

Have downloaded and run Microsoft Security Essentials, came across this by accident. Found x3 trojans....... This after having McAfee fully patched and running,regular scans, running online scans from Symatec and downloading and using a couple of recomended "free" versions. Thanks to all contributers, I have made notes of solutions provided, very useful. Cheers.
Avatar of gavin_d

ASKER

All contribututions added to complete the solution