Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently created a GPO for turning on the firewall for everyone, but now I need it removed so that everyone can manage there own firewall. I tried to delete it and it just goes to a default firewall setting, but still has the managed by a system administrator box up at the top. No one can edit there own firewall. How can I get things back to normal?

share|improve this question
Still not entirely clear what you are trying to do. Are applying the GPO at the domain level? Are you trying to delete the GPO locally? Have you tried to gpupdate /force command? – Nic Young Mar 1 '12 at 0:17
Run the group policy results wizard against the system. Make sure no firewall policies are still left. – Zoredache Mar 1 '12 at 7:28
up vote 0 down vote accepted

This is governed by Windows Firewall Group Policy Settings - specifically, "Windows Firewall: Protect all network connections" (ability to set general state) and "Allow local exceptions" group (ability to configure exceptions).

I suspect that after you deleted the GPO, the registry settings it had set didn't go nowhere. To check this, see HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\<all subkeys>|EnableFirewall in registry on a workstation (should be absent). (see Fix: Windows XP Firewall Settings grayed out (Windows XP) - TACKtech Corp. for illustrated explanation of the same)

Alternatively, it's some other GPO that may be affecting your workstations. Use rsop.msc on one of them to check for this possibility.

share|improve this answer
That is exactly what happened, the registry setting didn't clear and after a day of researching I finally found an article on it. So things are back to normal now. Thank you for your response. – poconnor Mar 6 '12 at 14:54

As I remember, removing GPO's does not change anything, this is more or less by design. Most settings/rules in GPO's are transparent by default which means that they don't change anything. Deleting the GPO therefore means that your rules goes back to transparent and just won't change anything.

To revert the settings back to normal, you have to apply the default settings manually. I'm not 100% sure about this though!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.