Windows XP Pro, Internet Connection Firewall & Group Policy

Posted: 11-18-2003, 09:06 PM

Research Services

Guest
Posts: n/a

Is there anyway to force the Internet Connection Firewall to On _AND_
specify the Advanced Settings (i.e., Services to allow through such as RDP,
File Sharing, etc.) with Group Policies and Active Directory?
It seems like the ICF is only useful for home users, but what about
corporate users on a Windows network/LAN? We don't have the $$$ to purchase
and install a hardware firewall solution at the Internet interface, nor
purchase and install 3rd party software for every client machine.
It seems that if we could control the behavior and advanced settings of the
ICF through Group Policy for a Windows Domain environment, we'd be set.
Any comments or suggestions? Thanks!

Responses to "Windows XP Pro, Internet Connection Firewall & Group Policy"

Andrew E

Guest
Posts: n/a

Windows XP Pro, Internet Connection Firewall & Group Policy

Posted: 11-19-2003, 02:31 AM

Try going to microsoft.com search,type:Manageability Kit
The have a manageability solutions cd thats designed for
that,its a trial issue but would cerainly give alot of
ideas for less than 10.00 for 120 days
the url might be.www.microsoft.com/windowsserver2003/
technologies/management/default.mspx

>-----Original Message-----
>Is there anyway to force the Internet Connection Firewall

to On _AND_

>specify the Advanced Settings (i.e., Services to allow

through such as RDP,

>File Sharing, etc.) with Group Policies and Active

Directory?

>It seems like the ICF is only useful for home users, but

what about

>corporate users on a Windows network/LAN? We don't have

the $$$ to purchase

>and install a hardware firewall solution at the Internet

interface, nor

>purchase and install 3rd party software for every client

machine.

>It seems that if we could control the behavior and

advanced settings of the

>ICF through Group Policy for a Windows Domain

environment, we'd be set.

>Any comments or suggestions? Thanks!
>
>
>.
>

Research Services

Guest
Posts: n/a

Re: Windows XP Pro, Internet Connection Firewall & Group Policy

Posted: 11-19-2003, 04:22 PM

Thanks for the link. It looks like the "toolkit" contains trial versions of
MS software - we own and are licensed for much of what is included.
Are there additional tools on the CDs that aid in what we are trying to do?
It seems like you should be able to download the whitepapers and tools
somewhere...?
Do you happen to know which solution or document addresses central
management of the Windows XP ICF through GPOs?
Thanks again for your help!

"Andrew E" <eckrichco@msn.com> wrote in message
news:069901c3ae45$3ee13970$a401280a@phx.gbl...

> Try going to microsoft.com search,type:Manageability Kit
> The have a manageability solutions cd thats designed for
> that,its a trial issue but would cerainly give alot of
> ideas for less than 10.00 for 120 days
> the url might be.www.microsoft.com/windowsserver2003/
> technologies/management/default.mspx
> >-----Original Message-----
> >Is there anyway to force the Internet Connection Firewall
> to On _AND_
> >specify the Advanced Settings (i.e., Services to allow
> through such as RDP,
> >File Sharing, etc.) with Group Policies and Active
> Directory?
> >It seems like the ICF is only useful for home users, but
> what about
> >corporate users on a Windows network/LAN? We don't have
> the $$$ to purchase
> >and install a hardware firewall solution at the Internet
> interface, nor
> >purchase and install 3rd party software for every client
> machine.
> >It seems that if we could control the behavior and
> advanced settings of the
> >ICF through Group Policy for a Windows Domain
> environment, we'd be set.
> >Any comments or suggestions? Thanks!
> >
> >
> >.
> >

Bruce Chambers

Guest
Posts: n/a

Re: Windows XP Pro, Internet Connection Firewall & Group Policy

Posted: 11-20-2003, 03:22 AM

Greetings --

The built-in firewall is not designed to be used on internal LAN
connections. The only connection on which you should have ICF enabled
is the connection to the Internet.

Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

"Research Services" <key@lamar.n0-sp@m.colostate.edu.NO> wrote in
message news:%23M7BJihrDHA.1740@TK2MSFTNGP12.phx.gbl...

> Is there anyway to force the Internet Connection Firewall to On

_AND_

> specify the Advanced Settings (i.e., Services to allow through such

as RDP,

> File Sharing, etc.) with Group Policies and Active Directory?
> It seems like the ICF is only useful for home users, but what about
> corporate users on a Windows network/LAN? We don't have the $$$ to

purchase

> and install a hardware firewall solution at the Internet interface,

nor

> purchase and install 3rd party software for every client machine.
> It seems that if we could control the behavior and advanced settings

of the

> ICF through Group Policy for a Windows Domain environment, we'd be

set.

> Any comments or suggestions? Thanks!
>
>

Research Services

Guest
Posts: n/a

Re: Windows XP Pro, Internet Connection Firewall & Group Policy

Posted: 11-20-2003, 03:16 PM

We have heard that the ICF was originally intended for home users. But with
the recent announcement of the heightened security enhancements in SP2 for
Windows XP it really sounds like Microsoft is changing that to include those
on a LAN.

http://msdn.microsoft.com/library/de...ityinxpsp2.asp

If they are turning ICF ON by default with SP2 that certainly applies to the
thousands of XP machines we have on our LAN so we expect a way to configure
the advanced settings of ICF with Group Policies.

"Bruce Chambers" <bchambers@nospamcableone.net> wrote in message
news:vrocsa56asek37@corp.supernews.com...

> Greetings --
>
> The built-in firewall is not designed to be used on internal LAN
> connections. The only connection on which you should have ICF enabled
> is the connection to the Internet.
>
>
> Bruce Chambers
>
> --
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on
> having both at once. -- RAH
>
>
> "Research Services" <key@lamar.n0-sp@m.colostate.edu.NO> wrote in
> message news:%23M7BJihrDHA.1740@TK2MSFTNGP12.phx.gbl...
> > Is there anyway to force the Internet Connection Firewall to On
> _AND_
> > specify the Advanced Settings (i.e., Services to allow through such
> as RDP,
> > File Sharing, etc.) with Group Policies and Active Directory?
> > It seems like the ICF is only useful for home users, but what about
> > corporate users on a Windows network/LAN? We don't have the $$$ to
> purchase
> > and install a hardware firewall solution at the Internet interface,
> nor
> > purchase and install 3rd party software for every client machine.
> > It seems that if we could control the behavior and advanced settings
> of the
> > ICF through Group Policy for a Windows Domain environment, we'd be
> set.
> > Any comments or suggestions? Thanks!
> >
> >
>
>

LinkBack

Thread Tools

Display Modes

« Unable to set NTFS permissions after Upgrade from XP Home to XP Pro | Forgot My Password as Administrator »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Defender Prompts on AD Group Policy deployed firewall changes	loraXXarol	Windows XP Beta	0	02-17-2006 07:14 PM
Firewall and Group Policy	Sean Horvath	Windows XP Embedded	3	02-23-2005 12:04 AM
How to manage windows xp firewall via domain group policy	Nick.V.	Windows XP Configuration & Management	1	10-26-2004 05:23 PM
Group Policy - Internet Locations	MegaHurtz	Windows XP Setup	0	02-22-2004 12:21 AM
empty temporary internet files group policy	David Shorthouse	Windows XP Security & Administration	0	08-05-2003 06:27 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90