We help IT Professionals succeed at work.

How to disable firewall of clients in SBS2011 domain

itplatoon asked
I have a new SBS2011 server where I need to turn off the built in firewall of Windows 7 and Windows XP clients. Currently, the client firewalls are enabled and the option to manage the firewall is greyed out.

How can I resolve this?
Group policy change?
Watch Question

If this helps you out, maybe RobWill should get the points - I've just noticed that he wrote the article!

See if this helps:

Start - Admin tools  - GP Management - expand Domains - expand Group Policy Objects - right click SBS Client-(Client Type XP or Vista/Windows 7) - Edit -

Computer Configuration/Policies/Administrative Templates/Policy Definitions/Network/Network Connections/Windows Firewall/Standard Profile.  On the right find Windows Firewall:  Protect All Network Connections.  This setting  should be Enabled.

Try changing that to Disabled

For XP the following explanation is given.  Vista/Windows 7 is similar.
Supported On:
At least Windows XP Professional with SP2ExplanationTurns on Windows Firewall.

If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network" policy setting.

If you disable this policy setting, Windows Firewall does not run. This is the only way to ensure that Windows Firewall does not run and administrators who log on locally cannot start it.

If you do not configure this policy setting, administrators can use the Windows Firewall component in Control Panel to turn Windows Firewall on or off, unless the "Prohibit use of Internet Connection Firewall on your DNS domain network" policy setting overrides.


I'll be back on site again in the next day or so to review this issue again.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.