[gptalk] Re: Stopping Vista Firewall Service not working

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 22 Jul 2008 11:48:17 -0700

Well, I'm not sure that managing the service directly is a good way to
handle it. That assumes that your users can figure out how to go in and
restart the service? That also assumes they have some level of admin. access
to do that?

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Kopenski, Jack
Sent: Tuesday, July 22, 2008 11:38 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Stopping Vista Firewall Service not working

 

Darren, 

 

I did not use that because I wanted this to a setting the user can change if
needed.  Was I correct in assuming I needed to use a preference?

 

Jack

 

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Tuesday, July 22, 2008 2:36 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Stopping Vista Firewall Service not working

Jack-

I think you'd be better off using the Windows Firewall with Advanced
Security feature in Vista GP to control the firewall on Vista. Have you used
that area before?

 

Darren

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Kopenski, Jack
Sent: Tuesday, July 22, 2008 11:31 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Stopping Vista Firewall Service not working

 

 

I have created a simple GPO using group policy preferences to stop the
Windows XP firewall service (SharedAccess) and to stop the Vista firewall
service (MpsSvc).  I configured:  Computer Configuration > Preferences >
Control Panel Settings > Services.

I created an entry for service "MpsSvc" with the Action to stop the service,
Startup as No Change, and Account Logon as No Change.

I created a second entry for service "SharedAcess" with the same settings. 

The GPO works fine for XP machines, but I see no change for Vista.  The RSOP
shows the GPO was applied as does the Group Policy event log.  I have tried
to run this with an Account Logon of Local System, but that made no
difference.  I  suspect it is a Vista UAC issue, so does anyone  see
anything I missed?

Jack 


The contents of this e-mail are intended for the named addressee only. It
contains information that may be confidential. Unless you are the named
addressee or an authorized designee, you may not copy or use it, or disclose
it to anyone else. If you received it in error please notify us immediately
and then destroy it.

Other related posts: