Guest Sanjay Mehta Posted June 20, 2008 Posted June 20, 2008 Hi, I have a GPO in a windows 2003 domain consisting on win xp2 pc's. The GPO is has the following settings: Windows Firewall: Protect all network connections - Disabled I am not sure why the previous guy configure it as such. Anybody have any ideas why its a good idea to disable the Windows Firewall Thanks
Guest Phillip Windell Posted June 20, 2008 Posted June 20, 2008 Re: Firewall Setting Because on a LAN it gets in the way of everything. I absolutely will not allow it to run on our LAN and have the same GPO you see. I already protect the LAN with a firewall,...I don't need one running on each local machine screwing things up. I know, I know,..."But Phil! You have to protect the machines from threats within!". I don't need a host-based firewall running at Layers3&4 to do that. "Firewalls" are not the only means of security and protection that exists. We all survived just fine on our LANs before XP came along. If someone's LAN needs hosts based firewalls to survive then the over-all LAN security scheme/policy already stinks to begin with and they are already in trouble. I do allow the traveling Laptops to enable the Firewall when they are not on the LAN. The GPO for the Windows Firewall has the ability to know the difference and adjust automatically according to if the machine is on or off the LAN. It determines that by whether or not the Domain Controller is detected during startup or not. -- Phillip Windell http://www.wandtv.com The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. ----------------------------------------------------- "Sanjay Mehta" <SanjayMehta@discussions.microsoft.com> wrote in message news:27F61B8F-F66C-40E9-8FBF-B3E60E73F371@microsoft.com... > Hi, > > I have a GPO in a windows 2003 domain consisting on win xp2 pc's. > > The GPO is has the following settings: > > Windows Firewall: Protect all network connections - Disabled > > > > I am not sure why the previous guy configure it as such. Anybody have any > ideas why its a good idea to disable the Windows Firewall > > > Thanks
Guest Sanjay Mehta Posted June 20, 2008 Posted June 20, 2008 Re: Firewall Setting Hi, Can you please elaborate as to what it gets in the way of? Thanks for your help
Guest Phillip Windell Posted June 23, 2008 Posted June 23, 2008 Re: Firewall Setting Remove a couple machines from the GPO. Enable the Windows Firewall See what breaks,...if nothing breaks then don't worry about it. -- Phillip Windell http://www.wandtv.com The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. ----------------------------------------------------- "Sanjay Mehta" <SanjayMehta@discussions.microsoft.com> wrote in message news:B0BB7998-0386-4DE2-822C-AAE12E4A5E70@microsoft.com... > Hi, > > Can you please elaborate as to what it gets in the way of? > > Thanks for your help
Recommended Posts