Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When defining new firewall rules with Group Policies in Windows Server 2008:

  • Does adding a single rule to allow traffic disable all other rules that were present locally on the client computer?
  • Does it inherit on a individual rule basis. For example does a single rule over ride a single rule on the client computer (or maybe the other way?)
  • Does this behavior depend on some base setting?

Also, any other gotchas when starting out with this would be appreciated if they pop into your head.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

GPO rules are merged (by default) to local rules. Rules where local and GPO conflict, GPO wins.

I haven't had any problems with it; but I meticulously planned each setting and rule in my Firewall GPOs, being sure to fully understand the implications of each setting before touching it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.