3
votes
1answer
21 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
1
vote
2answers
20 views

Single user change with forced domain firewall GPO

I have an issue which i need some help with. Current Scenario: I have a domain firewall policy, which turns the firewall ON and is enforced on "Authenticated users". The domain policy locks the ...
0
votes
1answer
59 views

Why does GPO for firewall inbound connections still allows change from “Block (Default)” to “Block all connections”

I found an interesting issue where I set a GPO to control the firewall policy to "Block (default)" the inbound connections, however that setting is not completely enforced. It still allows an ...
15
votes
4answers
927 views

What can be done to properly re-enable the Windows Firewall on a domain?

BACKGROUND/RESEARCH I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how? existed because Windows Admins in ...
2
votes
0answers
446 views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
1
vote
1answer
620 views

DirectAccess Server firewall rules blocking ports

I have configured DirectAccess on my Server 2012 Essentials box and most of it works great - I can remotely access the server via RDP and the default IIS website on port 80. However, I can't access ...
0
votes
1answer
639 views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
1answer
677 views

Disable firewall for all network profiles on Windows Server 2008 R2 through GPO

I've been trying to disable firewall on a number of Windows Server 2008 R2 machines for all network profiles using GPO, but it seems to be working only for domain profile so far. In Group Policy ...
0
votes
1answer
544 views

How to add port exception range via group policy

I am currently working in a Windows Server 2003 environment. We've recently picked up Spiceworks and are having some issues getting all of the machines on our network scanned properly. So far it seems ...
0
votes
1answer
772 views

Firewall GPO not applying despite being enumerated by gpresult

I have a need to open up the admin$ share on all of my domain's client PC's and I am trying to do so using group policy. I defined computer policy for Windows Firewall with Advanced Security in a ...
0
votes
2answers
1k views

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
1
vote
1answer
2k views

GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)

I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order ...
0
votes
1answer
722 views

Changing World Wide Web Services (HTTP Traffic-In) via Group Policy

I am working on designing some group policy elements for our servers. Without getting into a debate about pros or cons of group policy, I was curious if the following could be performed. I would like ...
1
vote
1answer
2k views

How can I block all programs inside a folder to connect to the internet in Windows?

I want to block all programs inside a folder to connect to the internet. Is there any way either using Windows Firewall or Group policy to block all programs inside a folder ?
1
vote
2answers
2k views

How to allow access to firewall settings (domain/windows 7)

I'm running a Windows 7 Workstation in a domain setting. I'd like to disable the local firewall (temporarily), but I am not allowed to do this because of restrictions in the domain. "For your ...
0
votes
1answer
357 views

Rule Inheritance for Windows 2008 Firewall Management With Group Policies

When defining new firewall rules with Group Policies in Windows Server 2008: Does adding a single rule to allow traffic disable all other rules that were present locally on the client computer? Does ...
1
vote
2answers
5k views

How to disable group policy control over Windows Vista firewall?

With Windows Vista Business, I'd like to completely disable any group policy (both local and domain) control over the Windows Firewall so that I can turn it off and on at will on the computer ...
1
vote
4answers
3k views

Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how?

I want to force the in-house machines here to have their firewall disabled so I can manipulate them with scripts. Trying to do it with GPO, but it doesn't result in a disabled and greyed out firewall ...
1
vote
1answer
13k views

Event ID: 861 - The Windows Firewall has detected an application listening for incoming traffic

Firstly, my machines aren't compromised any person suggesting such will be DV'd. The security logs on some of my networks client machines (all Windows Xp Sp3) get filled with these useless error ...