[gptalk] Re: turn on XP firewall service with group policy

  • From: "Shanahorn, Ed" <ShanahoE@xxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Apr 2008 09:59:46 -0400

Two other settings to consider...
Paths:
Computer Configuration/Administrative Templates/Network/Network 
Connections/Windows Firewall/Domain Profile/
Computer Configuration/Administrative Templates/Network/Network 
Connections/Windows Firewall/Standard Profile/
Setting:
Protect all network connections = Enabled

Explanation:
"Turns on Windows Firewall, which replaces Internet Connection Firewall on all 
computers that are running Windows XP Service Pack 2.  If you enable this 
policy setting, Windows Firewall runs and ignores the "Computer 
Configuration\Administrative Templates\Network\Network Connections\Prohibit use 
of Internet Connection Firewall on your DNS domain network" policy setting."

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of sunshine.baines@xxxxxxxxx
Sent: Wednesday, April 09, 2008 9:01 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: turn on XP firewall service with group policy

Thanks.
Sent from my BlackBerry® wireless device from U.S. Cellular

-----Original Message-----
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>

Date: Wed, 9 Apr 2008 17:24:46
To:<gptalk@xxxxxxxxxxxxx>
Subject: [gptalk] Re: turn on XP firewall service with group policy


Computer Configuration\Windows settings\security settings\System Services

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of sunshine.baines@xxxxxxxxx
Sent: Wednesday, April 09, 2008 5:21 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: turn on XP firewall service with group policy

Security template?
Sent from my BlackBerry® wireless device from U.S. Cellular

-----Original Message-----
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>

Date: Wed, 9 Apr 2008 17:19:32
To:<gptalk@xxxxxxxxxxxxx>
Subject: [gptalk] Re: turn on XP firewall service with group policy


You can also use Group Policy's Services security to set the startup type on
the service. Then all you need is a reboot (or a startup script) to get the
service started.

Darren

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sunshine Baines
Sent: Wednesday, April 09, 2008 4:47 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: turn on XP firewall service with group policy

I think I got a solution.   I will first have to make sure DWORD value
Start is 0x2 (2) in
HKEY_LOCAL_MACHINE | SYSTEM | CurrentControlSet | Services | SharedAccess
 and then run net start sharedaccess in order to start the service



On Wed, Apr 9, 2008 at 7:37 PM, Sunshine Baines
<sunshine.baines@xxxxxxxxx> wrote:
> It looks like the service FW/ICS isn't started on my machines.  And
> you have to be an admin to start it.
>
>
> On Wed, Apr 9, 2008 at 7:21 PM, Sunshine Baines
> <sunshine.baines@xxxxxxxxx> wrote:
> > Thanks.  The problem I'm having is the Windows Firewall/ICS is
> > disabled, so the firewall is not coming on.
> >
> >
> > On Wed, Apr 9, 2008 at 6:43 PM, Shane Williford
> > <shane.williford@xxxxxxxxxx> wrote:
> > > Yes...in the Computer Config -> Administrative Templates -> Network ->
Network Connections -> Windows Firewall
> > >
> > > Now, if you're wanting it on for computers on your LAN, use the
"domain profile" settings; set the "standard profile" settings for computers
(like laptops) that may leave your organization.
> > >
> > > Here are a couple articles to assist you:
> > > http://technet.microsoft.com/en-us/library/bb490626.aspx
> > >
http://www.windowsecurity.com/articles/Customizing-Windows-Firewall.html
> > >
> > > Happy computing! :)
> > >
> > >
> > >
> > >        -----Original Message-----
> > >        From: gptalk-bounce@xxxxxxxxxxxxx on behalf of Sunshine Baines
> > >        Sent: Wed 4/9/2008 4:04 PM
> > >        To: gptalk@xxxxxxxxxxxxx
> > >        Cc:
> > >        Subject: [gptalk] turn on XP firewall service with group policy
> > >
> > >
> > >
> > >        I set Managed policies for my windows firewall, but it isn'
turned on
> > >        at my clients.  Is there a group policy to make sure the
service is
> > >        turned on for the windows firewall?
> > >        ***********************
> > >        You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
> > >        ************************
> > >
> > > NOTICE: The information transmitted in this e-mail may contain
confidential
> > > and/or legally privileged information intended only for the use of the
> > > individual(s) named above. Review, use, disclosure, distribution, or
forwarding
> > > of this information by persons or entities other than the intended
recipient(s)
> > > is prohibited by law and may subject them to criminal or civil
liabilities.
> > > Statements and opinion expressed in this e-mail may not represent
those of
> > > Mazuma Credit Union. All e-mail communications through Mazuma's
corporate email
> > > system are subject to archiving and review by someone other than the
recipient.
> > > If you have received this communication in error, please notify the
sender
> > > immediately and delete/destroy any and all copies of the original
message from
> > > any computer or network system.
> > >
> >
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************
bj²ryšjÊvz–¦’¹~–²Âºn‰žJy‰9–Šž…y²®nzqrz®–j½ij¶Ã­Š¢jŠþj

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************
b��j{����r��y��
mjY�ǧv)�zf��� �֥�����-~���+-����+a�{.n�+�����^J��y�_��]9� 
�x"��-���y�b��(��n)�z��q�+r�z���^�+-j�����i�^j�m���� �祊�l��?j�!����
mjY?

CONFIDENTIALITY NOTICE: STRS Ohio intends this e-mail message and any 
attachments to be used only by the person(s) or entity to which it is 
addressed. This message may contain confidential and/or legally privileged 
information.  If the reader is not the intended recipient of this message or an 
employee or agent responsible for delivering the message to the intended 
recipient, you are hereby notified that you are prohibited from printing, 
copying, storing, disseminating or distributing this communication.  If you 
received this communication in error, please delete it from your computer and 
notify the sender by reply e-mail.
b��j{����r��y���
mjY�ǧv)�zf��� �֥�����-~���+-����+a�{.n�+�����^J��y�_��]9��� 
�x"��-���y�b��(��n)�z��q�+r�z����^�+-j�����i�^j�m�����祊�l��?j�!����
mjY?

Other related posts: