Firewall GPO settings

On an SBS 2008 SP2 domain I have a Firewall GPO to turn off the firewall on the workstations NICs. It doesn't seem to be getting applied and I can't figure out why. I ran a RSOP for specific computer and user combination and under Windows Firewall with Advanced Security for the Domain, Public and Private Profiles the Firewall State was "Disabled". I logged into the computer as the user and the firewall is turned on.

Is there somewhere else in GP to set the firewall state for the NIC?
westoneAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
bigstylerConnect With a Mentor Commented:
Hi

The GPO is applied to an OU that is containing "computers" ('and not users), right ?

Which OS versions are on the scope of the GP ? (verify that the GP is compatible with them).

Have you done that ? :

1.Expand the Computer Configuration folder, then the Administrative Templates folder.
2.Expand the Network folder, then the Network Connections folder, then the Windows Firewall folder.
3.Select the Standard Profile folder.
4.Double-click the Windows Firewall: Protect all network connections option.
5.Select Disabled, then click OK.
6.Select the Domain Profile folder.
7 Double-click the Windows Firewall: Protect all network connections option.
8 Select Disabled, then click OK.
9 Close the Group Policy dialog box.


You could disable the windows firewall service if it is still not working.
0
 
nettek0300Connect With a Mentor Commented:
Try logging in as admin and running gpupdate /force at a command line.  The computer may not be pulling the GP from the server.
0
 
westoneAuthor Commented:
"The GPO is applied to an OU that is containing "computers" ('and not users), right ? "

Under Security Filtering on the GPO is "Domain Computers", which contains the computers on our domain. Is that what you're asking?

Which OS versions are on the scope of the GP?  XP SP3
Yes, the settings you asked about are Disabled.
0
 
bigstylerCommented:
OK, and have you configured this same policy on the "Domain Profile" too ?

Could you tell us exactly which parameters you have already configured please ?
0
 
westoneAuthor Commented:
I still haven't figured this out. I am moving this week and will have to wait to address it after getting settled. Too much going on right now. Thanks for the help though.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.