SBS 2011 Firewall for connected desktops

Posted on 2012-09-14
Last Modified: 2012-09-14
I would like to allow only specific computers on the network to disable the windows firewall.  We have an older piece of software that communicates with a Xerox 6204 through the network and it will only successfully communicate when the firewall is off.  I have the software added to the exceptions list but this does not seem to matter.  Any advice is appreciated.
Question by:EMB_Corporation
    LVL 74

    Expert Comment

    by:Jeffrey Kane - TechSoEasy
    The firewall is handled by a Group Policy on your SBS 2011.  You can create exceptions to that by denying delegation of the policy to the specific computers.  

    I suggest that you create a security group and add the computers you want to affect to that group.  Then when you set the deny config in the GPO you can just list the Security Group.

    Info on how to configure this is here:

    LVL 74

    Accepted Solution

    On second thought... SBS 2011's Group Policy is a comprehensive "Client" policy... which includes things other than the Firewall.

    The GPO's are:
    Windows SBS Client - Windows 7 and Windows Vista Policy
    Windows SBS Client - Windows XP Policy

    If you fully deny these to some machines, those machines will not get other important settings.

    So, my other solution would be to use SysInternals ProcMon ( to see exactly which port might need to be added to the firewall exceptions on the workstations.


    Author Closing Comment

    Thanks for the help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
    The problem of the system drive in SBS 2003 getting full continues to be an issue, even though SBS 2008 and SBS 2011 are both in the market place.  There are several solutions to this, including adding additional drive space or using third party uti…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now