Trouble With Group Policy for Windows Firewall Settings

[iolagnm]

I've been trying with no luck to administer Windows Firewall settings using group policies. Basically I want to enable remote assistance as well as a couple other ports and applications. None of the changes I've been making for Windows Firewall seem to be having any effect. I've even tried just making simple settings such as to Disable a Display notification when the firewall blocks programs. Nothing seems to take effect. Any other settings outside of the Firewall seem to be working without any problems.

All of our domain controllers are running Server 2003 std. Almost all workstations are running XP Pro.

If anyone has come across this before, or has any ideas of what else to try, I would love to hear it.

Thanks

[chilifrei64]

There are 2 spots in GP where you can change this.. I forget the full path off the top of my head but it is computer configuration -> Administrative templates ->network -> Network Connections -> windows firewall

Then you want to go to the Domain Profile and NOT Standandard profile

With that being said.

Make sure the "Protect All Network Connections" is Enabled

Make sure the "Allow Remote Desktop Exception" is Enabled

Make sure the "Allow Remote Administration Exception" is Enabled

For the permissions.. since you are having problems.. start off with this.. On the OU that the computers are directly contained in. Apply the policy. For security filtering. Apply this policy to Authenticated Users. If you are still having a problem... enforce it

On the machine you are testing it on.. type in start -> run -> cmd

in the command windows.. type gpupdate /force

Once this is done.. restart the computer(just to make sure)

This should do it for you.

Also.. not sure how you do it but install the Group Policy management console for windows 2003 server.. it makes things SOOOOOO much easier to see.

With GPMC installed. if you still run into problems.. run GP results wizard and if it does not apply.. let us know the reason it tells you and we can help you from there.