Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I block certain ports for outbound communication for a set of Computers running Windows XP when joined in a Microsoft AD Domain

share|improve this question
up vote 1 down vote accepted

Under Windows XP firewall only blocks incoming traffic. It does not monitor outbound traffic. for that functioality you would need to upgrade to windows 7. By default windows 7 also allows all outbound traffic but you can create a GPO that will turn on blocking all outbound traffic unless there is a rule to permit the traffic.

share|improve this answer
I know that Win7 (and Vista) can do that via GPO because they have a higher version of the firewall.. just needed to know if there is any way to do it via GPO to XP Machines :\ – Bruno Silva Jul 2 '10 at 16:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.