Lets users choose to turn on and off windows firewall

Hi

We have a SBS 2008 domain, and we use F-secure as our antivirus and firewall software. Know when a users connects to the domain the windows firewall turns on. And they cant turn it off. I have looked att the GPO on the SBS 2008 server but all is shown as not configured. What can I do to prevent that both windows firewall and fsecure is on?
ants-servertechAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

wizzie83Commented:
You could create a startup script which checks for the f-secure service and then disables the windows firewall by setting the following registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"
EnableFirewall"=dword:00000000


0
merowingerCommented:
Better way is to control the Windows firewall in the different profiles. So e.g. if the client is connected to the domain, the firewall will be disabled, else its enabled.

Computer Configuration -> Administrative Templates -> Network ->Network Connections -> Windows Firewall
-> Domain Profile -> Protect all network connections -> Disabled
-> Standard Profile -> Protect all network connections -> Enabled

Also check out this:
http://www.experts-exchange.com/SBS_Small_Business_Server/Q_21995354.html

Is your F-Secure solution managed by a server or just installed on the clients?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ants-servertechAuthor Commented:
F-secure is installed satand alone on the clients. Its f-secure client security. And its has its on firewall, when you install it on a windows 7 or vista computer it deactivates the windows firewall, but not when you install it on a win xp.
0
merowingerCommented:
i don't know a way how to best disable the f-secure firewall on all clients, but you can use the above listed to handle your windows firewall
0
ants-servertechAuthor Commented:
Now, you have misunderstood me. I want to disable the Windows built-in firewall, not F-Secure. But if the user does not have F-Secure firewall software installed, then Windows will be built up, so the bass is on anväadren itself can turn off and turn on the built-in Windows firewall. As it looks now on Windows XP clients so that all of this grayed out. But on the Windows 7 client the windows firewall is deactivated when the F-Secure is installed.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.