asked on

Windows Firewall will not turn off on domain

We have a server that is running Small Business Server 2011. We have 2 computers running Windows XP that have a program that needs the firewall turned off because it seems the windows firewall is not allowing the program to communicate on these computers. Once computer is the master server machine and the other is the client machine.
We have disabled the group polices on the server and forced updates with gpudate command and still cannot get the firewall disabled on the computers. It still says controlled by group polices.

How can I disable this firewall on the computer if all domain polices are turned off. I have looked under default domain policy, SBS computers, etc. Its turned off everywhere. I can even log in as an administrator and it wont allow me to turn it off.

eexchangetech

http://social.technet.microsoft.com/Forums/windows/en-US/ba3a2fba-6428-454d-ba6f-53ec34fbb874/cant-turn-off-win-7-domain-firewall

If all you policies are set correctly. Remove the client PC from domain>>reboot>> and rejoin it again.

Larry Struckmeyer MVP

A better solution is to use group policy to open only the required ports. You can do it for all comuputers, or you can limit the scope to the two computers requiring those ports. But to turn it off for all computers instead of just allowing the required ports is a risk I would not want to take.

maximus7569

ASKER

This is for windows Xp not Windows 7.

ASKER CERTIFIED SOLUTION

Sandesh Dubey

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

Venkat Suresh

I doubt, it is not the firewall that is causing issue. I think you are facing issue due to DCOM, check for the same in system logs for DCOM 10009 events in SBS server. If you see DCOM errors then you need to modify couple of settings with regards to firewall. Check this link as you are referring to XP machines here.

DCOM 10009

Note: this article applies to SBS 2011 as well.

maximus7569

ASKER

Registry fix worked. Once we troubleshoot issue with software program we will renable firewall. Will look at dcom article.

Thanks all for the assistance.