I am trying to set all the systems on my test network (1 x Win Server 2008 R2, 2 x Win XP SP3, 2 x Win 7) so that Remote Admin Mode is enabled, but I am having difficulty doing this with the XP systems.
I started by setting up a GPO and assigning it to the computers in a test OU (which contains all of them). The GPO has remote admin enabled (supposedly) in Group Policy Management Editor -> Computer Configuration -> Policies -> Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Domain Profile (and Standard) -> Allow inbound remote administration exception ENABLED.
Once I have this set I go to a Win7 system and at the command prompt type GPUPDATE /force, and straight away if I type 'netsh firewall show state' the Firewall Status table comes up with
- Group policy version = Windows Firewall
- Remote admin mode = Enable
I can disable it with the expected results too. But if I do the same thing with an XP SP3 system, I always get
- Group policy version = None
- Remote admin mode = Disable
Even if I restart the XP systems twice, restart the server, GPUPDATE / force, left it overnight, it never changes. What am I doing wrong that the XP systems ignore the GPO? No other policies exist that could be overriding it. On the local system I can type 'netsh firewall set service RemoteAdmin enable' and it works just fine. I have also added the same setting to the default Domain Policy.
Why would the XP systems be ignoring the GPO? I have been struggling with this for half a day... Any advice would be greatly appreciated!