Re: Microsoft Firewall Client - Autoconfiguration via GPO

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 10 May 2004 09:29:24 -0700

Yes; the installer needs to operate as a local admin.
You don't need to install per-user; the FW Client keeps it's configuration 
under %AllUsersProfile%.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Jason Merrique" <j.merrique@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, May 10, 2004 08:30
Subject: [isalist] Re: Microsoft Firewall Client - Autoconfiguration via GPO


http://www.ISAserver.org

Hmmm, it's not in this case though. The Firewall Client doesn't start up
automatically after it has been installed - its not in the Start Menu,
and doesn't start up otherwise....

Would this have something to do with the fact that I've assigned the
package to the user rather than the Computer?

> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
> Sent: 10 May 2004 16:14
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Microsoft Firewall Client - 
> Autoconfiguration via GPO
> 
> http://www.ISAserver.org
> 
> By default, the Firewall Client is enabled when installed.
> Since the users aren't local admins, they can't modify that setting.
> 
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://www.microsoft.com/isaserver
>  http://isaserver.org/Jim_Harrison
>  http://isatools.org
> 
>  Read the help, books and articles!
> ----- Original Message -----
> From: "Jason Merrique" <j.merrique@xxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Monday, May 10, 2004 07:19
> Subject: [isalist] Re: Microsoft Firewall Client - 
> Autoconfiguration via GPO
> 
> 
> http://www.ISAserver.org
> 
> Hi Jim,
> 
> Thanks for your reply.
> 
> I'm afraid the users aren't local admins. There are some heavy
> restrictions. It's a real shame that the program is so badly suited to
> deployment. How is it deployed in large organisations? The 
> only solution
> I can think of is to manually add registry entries in a logon script. 
> 
> Cheers,
> 
> Jason 
> 
> > -----Original Message-----
> > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
> > Sent: 10 May 2004 14:41
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: Microsoft Firewall Client - 
> > Autoconfiguration via GPO
> > 
> > http://www.ISAserver.org
> > 
> > Unfortunately, no.
> > A question for you; are your users local admins on the 
> > machines they use?
> > If so, this action would only be as useful as the GPO 
> refresh period.
> > 
> >   Jim Harrison
> >   MCP(NT4, W2K), A+, Network+, PCG
> >   http://isaserver.org/Jim_Harrison/
> >   http://isatools.org
> >   Read the help / books / articles!
> > 
> > 
> > On Mon, 10 May 2004 10:44:23 +0100
> >  "Jason Merrique" <j.merrique@xxxxxxxxxxxxxxx> wrote:
> > http://www.ISAserver.org
> > 
> > Hi Chaps,
> >  
> > Is there an Administrative template for configuring the 
> > firewall client via Group Policy? The Client has been 
> > assigned and successfully installed on client machines within 
> > the scope of the GPO, but I'd like to automatically Enable 
> > the firewall as well.
> >  
> > Cheers,
> >  
> > Jason
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org 
> > Windows Security Resource Site: 
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion 
> > List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email 
> > to $subst('Email.Unsub')
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org 
> > Windows Security Resource Site: 
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion 
> > List as: j.merrique@xxxxxxxxxxxxxxx To unsubscribe send a 
> > blank email to $subst('Email.Unsub')
> > 
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: j.merrique@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: