Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Disabling local firewall from Active Directory

Posted on 2014-02-18
11
281 Views
Last Modified: 2014-03-07
Most of the users in the office have the windows FW enabled.  This is stopping me rolling out AV and other programes.  Can I disable this using AD so when then login to the domain the FW is off?
0
Comment
Question by:wannabecraig
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 9

Expert Comment

by:Alex Green
ID: 39866965
Yes,

You can use group policy for this,

Computer Config > Administrative Templates > Network > Network connections > Windows Firewall > Domain Profile  > Windows Firewall: Protect all network connections = Disabled

That will disable windows firewall

Regards

Alex
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 39867042
Do I do this on the DC?  I can't see the Computer config module.
0
 
LVL 9

Expert Comment

by:Alex Green
ID: 39867044
When you log onto your DC, click start, administrative tools, group policy.

Create a new group policy, make the changes and then link that to the OU with your computers in.

Regards

Alex
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 1

Author Comment

by:wannabecraig
ID: 39867054
ok, there was an exisiting domain policy and I edited it, is that ok?

Also, I assume users need to log off and on again before it disables it?
0
 
LVL 9

Expert Comment

by:Alex Green
ID: 39867060
It should apply within the next 4 - 6 hours depending on the time group policy last replicated, however you could ask for a reboot which would apply it immediately.

Regards

Alex
0
 
LVL 37

Expert Comment

by:bbao
ID: 39867105
>> Can I disable this using AD so when then login to the domain the FW is off?

Simply applying Group Policy cannot implement disabling FW when logged on and enabling FW when logged off. There must be a domain based logon script to do that.

> > Also, I assume users need to log off and on again before it disables it?

Just want to confirm if "disabling FW when logged on and enabling FW when logged off" is what exactly the author wanted?
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39867185
You won't find option to disable firewall at GPO path mentioned above

The correct path to turn off firewall is as below.

Computer configuration\Policies\Windows Settings\security settings\Windows firewall with advanced security\Windows firewall with advanced security -LDAP-------
Right click on above path and go to properties.
Here you need to turn off firewall state for domain profile, public profile and private Profile

Alternatively you can add .bat file in startup script section in GPO in computer configuration with below command

echo off
netsh advfirewall set allprofiles state off

startup script option can be found under Computer configuration\Policies\Windows Settings\scripts (Startup and Shutdown)\startup
You can copy .bat file in netlogon shared folder on domain controller.

Mahesh
0
 
LVL 9

Accepted Solution

by:
Alex Green earned 500 total points
ID: 39867187
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39867191
Also computers must be rebooted once to apply GPO and to disable firewall
0
 
LVL 9

Expert Comment

by:Alex Green
ID: 39867584
Not definately, you can just do a gpupdate /force or wait 4 hours (depending what is specified in the default domain policy)
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39867917
You can do gpupdate /force definitely if you use GPO settings to disable firewall

But if you use .bat file to disable firewall, then you must reboot the computer to run .bat file
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question