How to disable firewall of clients in SBS2011 domain

Posted on 2012-08-10
Last Modified: 2012-08-26
I have a new SBS2011 server where I need to turn off the built in firewall of Windows 7 and Windows XP clients. Currently, the client firewalls are enabled and the option to manage the firewall is greyed out.

How can I resolve this?
Group policy change?
Question by:itplatoon
    LVL 15

    Accepted Solution

    LVL 15

    Expert Comment

    If this helps you out, maybe RobWill should get the points - I've just noticed that he wrote the article!
    LVL 13

    Expert Comment

    See if this helps:

    Start - Admin tools  - GP Management - expand Domains - expand Group Policy Objects - right click SBS Client-(Client Type XP or Vista/Windows 7) - Edit -

    Computer Configuration/Policies/Administrative Templates/Policy Definitions/Network/Network Connections/Windows Firewall/Standard Profile.  On the right find Windows Firewall:  Protect All Network Connections.  This setting  should be Enabled.

    Try changing that to Disabled

    For XP the following explanation is given.  Vista/Windows 7 is similar.
    Supported On:
    At least Windows XP Professional with SP2ExplanationTurns on Windows Firewall.

    If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network" policy setting.

    If you disable this policy setting, Windows Firewall does not run. This is the only way to ensure that Windows Firewall does not run and administrators who log on locally cannot start it.

    If you do not configure this policy setting, administrators can use the Windows Firewall component in Control Panel to turn Windows Firewall on or off, unless the "Prohibit use of Internet Connection Firewall on your DNS domain network" policy setting overrides.

    Author Comment

    I'll be back on site again in the next day or so to review this issue again.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
    This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer:…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now